{"id":"CVE-2019-19203","aliases":["ALSA-2020:3662","ALSA-2024:0889","BELL-CVE-2019-19203","CLSA-2026-1776951056","DEBIAN-CVE-2019-19203","DLA-2431-1","EUVD-2019-8835","GHSA-ggp4-f63c-mcc4","MGASA-2020-0029","RHSA-2020:3662","RHSA-2020:5275","RHSA-2024:0409","RHSA-2024:0572","RHSA-2024:0889","RLSA-2020:3662","SUSE-SU-2022:3327-1","UBUNTU-CVE-2019-19203","USN-5662-1","openSUSE-SU-2024:11111-1"],"status":"published","title":"An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in...","description":"An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04052,"percentile":0.9072,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-125"],"published":"2019-11-21T20:06:59Z","modified":"2026-10-29T11:02:27Z","exploits":[{"source":"pocgithub","id":"ManhNDd/CVE-2019-19203","title":"ManhNDd/CVE-2019-19203","date":"2019-11-21","url":"https://github.com/ManhNDd/CVE-2019-19203"},{"source":"pocgithub","id":"tarantula-team/CVE-2019-19203","title":"tarantula-team/CVE-2019-19203","date":"2019-12-24","url":"https://github.com/tarantula-team/CVE-2019-19203"}],"fixes":[{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-bcmath","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-cli","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-common","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-dba","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-dbg","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-devel","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-embedded","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-enchant","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-fpm","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-gd","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-gmp","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-intl","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-json","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-ldap","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-mbstring","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-mysqlnd","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-odbc","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-opcache","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-pdo","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-pgsql","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-process","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-recode","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-snmp","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-soap","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-xml","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"php-xmlrpc","fixed_in":["7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libonig","fixed_in":["6.9.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libonig","fixed_in":["6.9.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libonig","fixed_in":["6.9.4-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libonig","fixed_in":["5.9.1-1ubuntu1.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libonig","fixed_in":["5.9.6-1ubuntu0.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libonig","fixed_in":["6.7.0-1ubuntu0.1~esm2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.17-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.5.0+152+112d3b8c"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.3.0+2009+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.20-1.module_el8.4.0+2229+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-2.1.el8_9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oniguruma-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-2.1.el8_9"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.24-1.module_el8+2373+87db76af.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.4-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.3-2+deb9u1"}]}],"versions":["6.1.3-2"],"bundled":6},{"source":"osv","ecosystem":"Mageia:7","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.4-1.mga7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.2.0+4968+1d5097db"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.1.0+3189+a1bff096"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-recode-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.2.0+7373+b272fdef"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php73-php-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"oniguruma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"oniguruma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"oniguruma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"oniguruma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"oniguruma-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"oniguruma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"oniguruma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"oniguruma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"oniguruma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"oniguruma-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oniguruma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oniguruma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"oniguruma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"oniguruma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"oniguruma-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.8.2-2.1.el8_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.2-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.20-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.4-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-150000.3.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-1ubuntu1.1+esm3"}]}],"versions":["5.9.1-1","5.9.1-1ubuntu1","5.9.1-1ubuntu1.1","5.9.1-1ubuntu1.1+esm1","5.9.1-1ubuntu1.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.6-1ubuntu0.1+esm3"}]}],"versions":["5.9.6-1","5.9.6-1ubuntu0.1","5.9.6-1ubuntu0.1+esm1","5.9.6-1ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-1ubuntu0.1~esm2"}]}],"versions":["6.5.0-1","6.6.1-1","6.7.0-1","6.7.0-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-1ubuntu1.1+esm3"}]}],"versions":["5.9.1-1","5.9.1-1ubuntu1","5.9.1-1ubuntu1.1","5.9.1-1ubuntu1.1+esm1","5.9.1-1ubuntu1.1+esm2"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.6-1ubuntu0.1+esm3"}]}],"versions":["5.9.6-1","5.9.6-1ubuntu0.1","5.9.6-1ubuntu0.1+esm1","5.9.6-1ubuntu0.1+esm2"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0-1ubuntu0.1~esm2"}]}],"versions":["6.5.0-1","6.6.1-1","6.7.0-1","6.7.0-1ubuntu0.1~esm1"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"oniguruma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.7.1-1.2"}]}],"bundled":7}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"oniguruma_project","product":"oniguruma"}],"references":[{"url":"https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2","tags":["x_refsource_MISC","x_transferred","Release Notes","advisory","report"]},{"url":"https://github.com/kkos/oniguruma/issues/163","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","fix","report"]},{"url":"https://github.com/ManhNDd/CVE-2019-19203","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3MBNW6Z4DOXSCNWGBLQ7OA3OGUJ44WL/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://github.com/tarantula-team/CVE-2019-19203","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19203","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V3MBNW6Z4DOXSCNWGBLQ7OA3OGUJ44WL/"},{"url":"https://github.com/advisories/GHSA-ggp4-f63c-mcc4"},{"url":"https://errata.almalinux.org/8/ALSA-2020-3662.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-11039","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11040","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11041","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11042","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11045","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11047","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11048","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11050","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-13224","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-13225","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-16163","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19203","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19204","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19246","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-20454","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7059","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7060","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7062","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7063","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7064","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7065","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-7066","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0889","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13224","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16163","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19012","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19203","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19204","tags":["report"]},{"url":"https://bugzilla.redhat.com/1728970","tags":["report"]},{"url":"https://bugzilla.redhat.com/1768997","tags":["report"]},{"url":"https://bugzilla.redhat.com/1802051","tags":["report"]},{"url":"https://bugzilla.redhat.com/1802061","tags":["report"]},{"url":"https://bugzilla.redhat.com/1802068","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-0889.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-19203","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1776951056.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-19203","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0029.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25843","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SNL26OZSQRVLEO6JRNUVIMZTICXBNEQW/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/NWOWZZNFSAWM3BUTQNAE3PD44A6JU4KE/","tags":["web"]},{"url":"https://www.debian.org/lts/security/2019/dla-2020","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3662","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1735494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1768997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1797776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1797779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837842","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3662.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11039","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11040","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11045","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11045","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11045","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11047","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11047","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11048","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11048","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11050","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11050","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13224","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13225","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13225","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13225","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16163","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19203","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19204","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19246","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19246","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19246","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20454","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20454","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20454","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7059","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7059","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7060","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7060","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7060","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7062","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7062","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7062","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7063","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7063","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7063","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7064","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7064","tags":["advisory"]},{"url":"https://bugs.php.net/bug.php?id=79282","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7065","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7065","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7065","tags":["advisory"]},{"url":"https://www.php.net/ChangeLog-7.php#PHP_7_3","tags":["article"]},{"url":"https://www.php.net/ChangeLog-7.php#PHP_7_4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7066","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7066","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7066","tags":["advisory"]},{"url":"https://bugs.php.net/bug.php?id=79329","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5275","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.6_release_notes/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5275.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0409","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802051","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0409.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19012","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19012","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0572","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0572.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0889.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:3662","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223327-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1142847","tags":["report"]},{"url":"https://bugzilla.suse.com/1150130","tags":["report"]},{"url":"https://bugzilla.suse.com/1157805","tags":["report"]},{"url":"https://bugzilla.suse.com/1164550","tags":["report"]},{"url":"https://bugzilla.suse.com/1164569","tags":["report"]},{"url":"https://bugzilla.suse.com/1177179","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26159","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-19203","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5662-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-16163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19246","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19012","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-19203","description":"An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.","status":"published","published":"2019-11-21T20:06:59Z","modified":"2024-08-05T02:09:39.577Z","updated_at":"2026-11-02T14:20:20.397093Z"}],"euvd":[{"id":"EUVD-2019-8835","description":"An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.","status":"published","published":"2019-11-21T20:06:59Z","modified":"2024-08-05T02:09:39Z","updated_at":"2026-11-03T02:40:26.287407Z"}],"ghsa":[{"id":"GHSA-ggp4-f63c-mcc4","title":"An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in...","description":"An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.","status":"published","published":"2022-05-24T17:01:44Z","modified":"2023-01-28T05:07:31Z","updated_at":"2026-11-02T14:44:32.600172Z"}],"nvd":[{"id":"CVE-2019-19203","description":"An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.","status":"published","published":"2019-11-21T21:15:11.497Z","modified":"2026-06-17T02:26:16.92Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:05:37.024431Z"}],"osv":[{"id":"BELL-CVE-2019-19203","title":"CVE-2019-19203 does not affect BellSoft software","status":"withdrawn","published":"2019-11-21T21:15:00Z","modified":"2026-01-26T09:48:49.242437Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-19203","description":"An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.","status":"published","published":"2019-11-21T21:15:11.497Z","modified":"2026-10-20T13:45:07.129469038Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:12.010761Z"},{"id":"DEBIAN-CVE-2019-19203","description":"An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.","status":"published","published":"2019-11-21T21:15:11.497Z","modified":"2026-09-21T07:01:54.481266549Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"RHSA-2020:3662","title":"Red Hat Security Advisory: php:7.3 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T04:36:11Z","modified":"2026-08-18T10:01:21Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5275","title":"Red Hat Security Advisory: rh-php73-php security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:43:43Z","modified":"2026-08-18T10:01:21Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2024:0409","title":"Red Hat Security Advisory: oniguruma security update","status":"published","published":"2024-09-16T16:51:01Z","modified":"2026-06-28T11:04:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0572","title":"Red Hat Security Advisory: oniguruma security update","status":"published","published":"2024-09-16T16:51:11Z","modified":"2026-06-28T11:05:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0889","title":"Red Hat Security Advisory: oniguruma security update","status":"published","published":"2024-09-16T16:51:20Z","modified":"2026-06-28T11:05:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RLSA-2020:3662","title":"Moderate: php:7.3 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.3.20). (BZ#1856655)\n\nSecurity Fix(es):\n\n* php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)\n\n* php: Buffer over-read in exif_read_data() (CVE-2019-11040)\n\n* php: DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte (CVE-2019-11045)\n\n* php: Information disclosure in exif_read_data() (CVE-2019-11047)\n\n* php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)\n\n* oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)\n\n* oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)\n\n* oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)\n\n* oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)\n\n* oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)\n\n* pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode (CVE-2019-20454)\n\n* php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)\n\n* php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)\n\n* php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)\n\n* php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)\n\n* php: Information disclosure in exif_read_data() function (CVE-2020-7064)\n\n* php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution (CVE-2020-7065)\n\n* php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)\n\n* php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)\n\n* php: Out of bounds read when parsing EXIF information (CVE-2019-11050)\n\n* oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)\n\n* php: Information disclosure in function get_headers (CVE-2020-7066)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2020-09-08T08:38:31Z","modified":"2026-02-04T20:15:13.875002Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-19203","description":"An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.","status":"published","published":"2019-11-21T21:15:00Z","modified":"2026-04-22T12:14:43.644048Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"ALSA-2020:3662","title":"Moderate: php:7.3 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.3.20). (BZ#1856655)\n\nSecurity Fix(es):\n\n* php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)\n\n* php: Buffer over-read in exif_read_data() (CVE-2019-11040)\n\n* php: DirectoryIterator class accepts filenames with embedded \\0 byte and treats them as terminating at that byte (CVE-2019-11045)\n\n* php: Information disclosure in exif_read_data() (CVE-2019-11047)\n\n* php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)\n\n* oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)\n\n* oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)\n\n* oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)\n\n* oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)\n\n* oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)\n\n* pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode (CVE-2019-20454)\n\n* php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)\n\n* php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)\n\n* php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)\n\n* php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)\n\n* php: Information disclosure in exif_read_data() function (CVE-2020-7064)\n\n* php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution (CVE-2020-7065)\n\n* php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)\n\n* php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)\n\n* php: Out of bounds read when parsing EXIF information (CVE-2019-11050)\n\n* oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)\n\n* php: Information disclosure in function get_headers (CVE-2020-7066)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2020-09-08T08:38:31Z","modified":"2026-10-29T11:00:19.53000927Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2024:0889","title":"Moderate: oniguruma security update","description":"Oniguruma is a regular expressions library that supports a variety of character encodings. \n\nSecurity Fix(es):\n\n* oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)\n* oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)\n* oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read (CVE-2019-19012)\n* oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)\n* oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-02-20T00:00:00Z","modified":"2026-10-29T11:02:27.486955069Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2026-1776951056","title":"php: Fix of CVE-2019-19203","description":"- CVE-2019-19203: fix heap-buffer-overflow in gb18030_mbc_enc_len by\n  installing a GB18030-aware code_to_mbclen and filtering invalid code\n  points from add_ctype_to_cc","status":"published","published":"2026-04-23T13:31:00Z","modified":"2026-06-01T00:33:14.397430663Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-2431-1","title":"libonig - security update","status":"published","published":"2020-11-03T00:00:00Z","modified":"2026-03-09T01:18:17.635721Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2020-0029","title":"Updated oniguruma packages fix security vulnerabilities","description":"Updated oniguruma packages fix security vulnerabilities:\n\nA use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2\nallows attackers to potentially cause information disclosure, denial\nof service, or possibly code execution by providing a crafted regular\nexpression. The attacker provides a pair of a regex pattern and a string,\nwith a multi-byte encoding that gets handled by onig_new_deluxe()\n(CVE-2019-13224).\n\nA NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2\nallows attackers to potentially cause denial of service by providing a\ncrafted regular expression (CVE-2019-13225).\n\nOniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of\nrecursion in regparse.c (CVE-2019-16163).\n\nAn integer overflow in the search_in_range function in regexec.c leads to\nan out-of-bounds read, in which the offset of this read is under the\ncontrol of an attacker. (This only affects the 32-bit compiled version).\nRemote attackers can cause a denial-of-service or information disclosure,\nor possibly have unspecified other impact, via a crafted regular expression\n(CVE-2019-19012).\n\nAn issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function\ngb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced\nwithout checking if it passed the end of the matched string. This leads to\na heap-based buffer over-read (CVE-2019-19203).\n\nIn the function fetch_range_quantifier in regparse.c, PFETCH is called\nwithout checking PEND. This leads to a heap-based buffer over-read and\nlead to denial-of-service via a crafted regular expression\n(CVE-2019-19204).\n\nHeap-based buffer over-read in str_lower_case_match in regexec.c can lead\nto denial-of-service via a crafted regular expression (CVE-2019-19246).\n","status":"published","published":"2020-01-11T23:52:04Z","modified":"2026-04-16T04:42:49.957996357Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2024:11111-1","title":"libonig5-6.9.7.1-1.2 on GA media","description":"These are all security issues fixed in the libonig5-6.9.7.1-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:06.725105Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2022:3327-1","title":"Security update for oniguruma","description":"This update for oniguruma fixes the following issues:\n\n- CVE-2019-19246: Fixed an out of bounds access during regular\n  expression matching (bsc#1157805).\n- CVE-2019-19204: Fixed an out of bounds access when compiling a\n  crafted regular expression (bsc#1164569).\n- CVE-2019-19203: Fixed an out of bounds access when performing a\n  string search (bsc#1164550).\n- CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling\n  a crafted regular expression, which could lead to denial of service (bsc#1150130).\n- CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179).\n- CVE-2019-13224: Fixed a potential use-after-free when handling\n  multiple different encodings (bsc#1142847).\n","status":"published","published":"2022-09-21T10:47:37Z","modified":"2026-02-04T04:22:24.013432Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-5662-1","title":"libonig vulnerabilities","description":"It was discovered that Oniguruma incorrectly handled certain regular\nexpressions. An attacker could possibly use this issue to cause a denial\nof service, obtain sensitive information or other unspecified impact. This issue\nonly affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2019-16163,\nCVE-2019-19012, CVE-2019-19204, CVE-2019-19246)\n\nIt was discovered that Oniguruma incorrectly handled memory when using certain\nUChar pointers. An attacker could possibly use this issue to cause a denial of\nservice or sensitive information disclosure. (CVE-2019-19203)\n","status":"published","published":"2022-10-10T05:11:49Z","modified":"2026-06-29T13:49:42.239176223Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}