Oniguruma: Multiple vulnerabilities

Oniguruma: Multiple vulnerabilities Multiple vulnerabilities have been found in Oniguruma, the worst of which could result in the arbitrary execution of code. oniguruma 2019-11-07 2019-11-07 691832 local, remote 6.9.3 6.9.3

Oniguruma is a regular expression library.

Multiple vulnerabilities have been discovered in Oniguruma. Please review the CVE identifiers referenced below for details.

A remote attacker, by enticing a user to process a specially crafted string using an application linked against Oniguruma, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.

There is no known workaround at this time.

All Oniguruma users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=dev-libs/oniguruma-6.9.3"

CVE-2019-13224 CVE-2019-13225 whissi whissi