• Oniguruma vulnerabilities

    From bugz_ubuntu@21:4/110 to Ubuntu Users on Monday, August 17, 2020 16:10:04
    libonig vulnerabilities

    A security issue affects these releases of Ubuntu and its
    derivatives:

    * Ubuntu 14.04 ESM

    Summary

    Several security issues were fixed in Oniguruma.

    Software Description

    * libonig - regular expressions library

    Details

    It was discovered that Oniguruma incorrectly handled certain
    regular expressions. An attacker could possibly use this issue to
    cause a denial of service, obtain sensitive information or other
    unspecified impact. (CVE-2019-16163, CVE-2019-19012,
    CVE-2019-19204, CVE-2019-19246)

    Update instructions

    The problem can be corrected by updating your system to the
    following package versions:

    Ubuntu 14.04 ESM
    libonig2 - 5.9.1-1ubuntu1.1+esm2

    To update your system, please follow these instructions:
    https://wiki.ubuntu.com/Security/Upgrades.

    In general, a standard system update will make all the necessary
    changes.

    References

    * CVE-2019-16163
    * CVE-2019-19012
    * CVE-2019-19204
    * CVE-2019-19246

    --- Mystic BBS v1.12 A45 (Linux/64)
    * Origin: BZ&BZ BBS (21:4/110)