cvelistv5 - cve-2020-26159

CVE-2020-26159 (GCVE-0-2020-26159)

Vulnerability from cvelistv5 – Published: 2020-09-30 12:41 – Updated: 2021-02-02 20:16

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2021-02-02T20:16:32",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-26159",
    "datePublished": "2020-09-30T12:41:13",
    "dateRejected": "2021-02-02T20:16:32",
    "dateReserved": "2020-09-30T00:00:00",
    "dateUpdated": "2021-02-02T20:16:32",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none\"}]",
      "id": "CVE-2020-26159",
      "lastModified": "2023-11-07T03:20:30.767",
      "published": "2020-09-30T21:15:13.357",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Rejected"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2020-26159\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2020-09-30T21:15:13.357\",\"lastModified\":\"2023-11-07T03:20:30.767\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none\"}],\"metrics\":{},\"references\":[]}}"
  }
}

OPENSUSE-SU-2024:11111-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

libonig5-6.9.7.1-1.2 on GA media

Notes

Title of the patch

libonig5-6.9.7.1-1.2 on GA media

Description of the patch

These are all security issues fixed in the libonig5-6.9.7.1-1.2 package on the GA media of openSUSE Tumbleweed.

Patchnames

openSUSE-Tumbleweed-2024-11111

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "libonig5-6.9.7.1-1.2 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the libonig5-6.9.7.1-1.2 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-11111",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11111-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13224 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13224/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13225 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13225/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19012 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19012/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19203 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19203/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19204 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19204/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19246 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19246/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-26159 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-26159/"
      }
    ],
    "title": "libonig5-6.9.7.1-1.2 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:11111-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig5-6.9.7.1-1.2.aarch64",
                "product": {
                  "name": "libonig5-6.9.7.1-1.2.aarch64",
                  "product_id": "libonig5-6.9.7.1-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-6.9.7.1-1.2.aarch64",
                "product": {
                  "name": "oniguruma-devel-6.9.7.1-1.2.aarch64",
                  "product_id": "oniguruma-devel-6.9.7.1-1.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig5-6.9.7.1-1.2.ppc64le",
                "product": {
                  "name": "libonig5-6.9.7.1-1.2.ppc64le",
                  "product_id": "libonig5-6.9.7.1-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-6.9.7.1-1.2.ppc64le",
                "product": {
                  "name": "oniguruma-devel-6.9.7.1-1.2.ppc64le",
                  "product_id": "oniguruma-devel-6.9.7.1-1.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig5-6.9.7.1-1.2.s390x",
                "product": {
                  "name": "libonig5-6.9.7.1-1.2.s390x",
                  "product_id": "libonig5-6.9.7.1-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-6.9.7.1-1.2.s390x",
                "product": {
                  "name": "oniguruma-devel-6.9.7.1-1.2.s390x",
                  "product_id": "oniguruma-devel-6.9.7.1-1.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig5-6.9.7.1-1.2.x86_64",
                "product": {
                  "name": "libonig5-6.9.7.1-1.2.x86_64",
                  "product_id": "libonig5-6.9.7.1-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-6.9.7.1-1.2.x86_64",
                "product": {
                  "name": "oniguruma-devel-6.9.7.1-1.2.x86_64",
                  "product_id": "oniguruma-devel-6.9.7.1-1.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig5-6.9.7.1-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64"
        },
        "product_reference": "libonig5-6.9.7.1-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig5-6.9.7.1-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le"
        },
        "product_reference": "libonig5-6.9.7.1-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig5-6.9.7.1-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x"
        },
        "product_reference": "libonig5-6.9.7.1-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig5-6.9.7.1-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64"
        },
        "product_reference": "libonig5-6.9.7.1-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.9.7.1-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64"
        },
        "product_reference": "oniguruma-devel-6.9.7.1-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.9.7.1-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le"
        },
        "product_reference": "oniguruma-devel-6.9.7.1-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.9.7.1-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x"
        },
        "product_reference": "oniguruma-devel-6.9.7.1-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.9.7.1-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
        },
        "product_reference": "oniguruma-devel-6.9.7.1-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-13224",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13224"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13224",
          "url": "https://www.suse.com/security/cve/CVE-2019-13224"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1142847 for CVE-2019-13224",
          "url": "https://bugzilla.suse.com/1142847"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203568 for CVE-2019-13224",
          "url": "https://bugzilla.suse.com/1203568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13224"
    },
    {
      "cve": "CVE-2019-13225",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13225"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13225",
          "url": "https://www.suse.com/security/cve/CVE-2019-13225"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141157 for CVE-2019-13225",
          "url": "https://bugzilla.suse.com/1141157"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13225"
    },
    {
      "cve": "CVE-2019-19012",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19012"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial-of-service or information disclosure, or possibly have unspecified other impact, via a crafted regular expression.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19012",
          "url": "https://www.suse.com/security/cve/CVE-2019-19012"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156984 for CVE-2019-19012",
          "url": "https://bugzilla.suse.com/1156984"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19012"
    },
    {
      "cve": "CVE-2019-19203",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19203"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19203",
          "url": "https://www.suse.com/security/cve/CVE-2019-19203"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1164550 for CVE-2019-19203",
          "url": "https://bugzilla.suse.com/1164550"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203568 for CVE-2019-19203",
          "url": "https://bugzilla.suse.com/1203568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19203"
    },
    {
      "cve": "CVE-2019-19204",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19204"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19204",
          "url": "https://www.suse.com/security/cve/CVE-2019-19204"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1164569 for CVE-2019-19204",
          "url": "https://bugzilla.suse.com/1164569"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203568 for CVE-2019-19204",
          "url": "https://bugzilla.suse.com/1203568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19204"
    },
    {
      "cve": "CVE-2019-19246",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19246"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19246",
          "url": "https://www.suse.com/security/cve/CVE-2019-19246"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157805 for CVE-2019-19246",
          "url": "https://bugzilla.suse.com/1157805"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203568 for CVE-2019-19246",
          "url": "https://bugzilla.suse.com/1203568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19246"
    },
    {
      "cve": "CVE-2020-26159",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-26159"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
          "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-26159",
          "url": "https://www.suse.com/security/cve/CVE-2020-26159"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177179 for CVE-2020-26159",
          "url": "https://bugzilla.suse.com/1177179"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203568 for CVE-2020-26159",
          "url": "https://bugzilla.suse.com/1203568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
            "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-26159"
    }
  ]
}

GSD-2020-26159

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none.

Aliases

CVE-2020-26159

Aliases

CVE-2020-26159

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2020-26159",
    "description": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none.",
    "id": "GSD-2020-26159",
    "references": [
      "https://www.suse.com/security/cve/CVE-2020-26159.html",
      "https://advisories.mageia.org/CVE-2020-26159.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2020-26159"
      ],
      "details": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none.",
      "id": "GSD-2020-26159",
      "modified": "2023-12-13T01:22:09.309667Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2020-26159",
        "STATE": "REJECT"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none."
          }
        ]
      }
    }
  }
}

FKIE_CVE-2020-26159

Vulnerability from fkie_nvd - Published: 2020-09-30 21:15 - Updated: 2023-11-07 03:20

Severity ?

Summary

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none

References

	URL	Tags

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none"
    }
  ],
  "id": "CVE-2020-26159",
  "lastModified": "2023-11-07T03:20:30.767",
  "metrics": {},
  "published": "2020-09-30T21:15:13.357",
  "references": [],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Rejected"
}

GHSA-JCJP-J466-5XXG

Vulnerability from github – Published: 2022-05-24 17:29 – Updated: 2022-05-24 17:29

Details

In Oniguruma 6.9.5_rev1, an attacker able to supply a regular expression for compilation may be able to overflow a buffer by one byte in concat_opt_exact_str in src/regcomp.c .

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2020-26159"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2020-09-30T21:15:00Z",
    "severity": "CRITICAL"
  },
  "details": "In Oniguruma 6.9.5_rev1, an attacker able to supply a regular expression for compilation may be able to overflow a buffer by one byte in concat_opt_exact_str in src/regcomp.c .",
  "id": "GHSA-jcjp-j466-5xxg",
  "modified": "2022-05-24T17:29:52Z",
  "published": "2022-05-24T17:29:52Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26159"
    },
    {
      "type": "WEB",
      "url": "https://github.com/kkos/oniguruma/issues/207"
    },
    {
      "type": "WEB",
      "url": "https://github.com/kkos/oniguruma/commit/cbe9f8bd9cfc6c3c87a60fbae58fa1a85db59df0"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00025.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2ZCUPCKJNSUHQMXXZBRNDDGQQLBJ2ACT"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4NHVR7X5ZLXUGW3PBCPQMNFQ3OJCSMQD"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFUJY7BUIFBTZ3IUHVHCID4JYCRDGKPS"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2020/09/30/7"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

SUSE-SU-2024:2993-1

Vulnerability from csaf_suse - Published: 2024-08-21 10:37 - Updated: 2024-08-21 10:37

Summary

Security update for oniguruma

Notes

Title of the patch

Security update for oniguruma

Description of the patch

This update for oniguruma fixes the following issues: - CVE-2020-26159: Fixed buffer overflow in concat_opt_exact_str could that could lead in DoS (bsc#1177179)

Patchnames

SUSE-2024-2993,SUSE-SLE-SDK-12-SP5-2024-2993,SUSE-SLE-SERVER-12-SP5-2024-2993

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for oniguruma",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for oniguruma fixes the following issues:\n\n- CVE-2020-26159: Fixed buffer overflow in concat_opt_exact_str could that could lead in DoS (bsc#1177179)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2024-2993,SUSE-SLE-SDK-12-SP5-2024-2993,SUSE-SLE-SERVER-12-SP5-2024-2993",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_2993-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2024:2993-1",
        "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20242993-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2024:2993-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2024-August/036661.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177179",
        "url": "https://bugzilla.suse.com/1177179"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-26159 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-26159/"
      }
    ],
    "title": "Security update for oniguruma",
    "tracking": {
      "current_release_date": "2024-08-21T10:37:46Z",
      "generator": {
        "date": "2024-08-21T10:37:46Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2024:2993-1",
      "initial_release_date": "2024-08-21T10:37:46Z",
      "revision_history": [
        {
          "date": "2024-08-21T10:37:46Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig2-5.9.2-13.6.1.aarch64",
                "product": {
                  "name": "libonig2-5.9.2-13.6.1.aarch64",
                  "product_id": "libonig2-5.9.2-13.6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-5.9.2-13.6.1.aarch64",
                "product": {
                  "name": "oniguruma-devel-5.9.2-13.6.1.aarch64",
                  "product_id": "oniguruma-devel-5.9.2-13.6.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig2-5.9.2-13.6.1.i586",
                "product": {
                  "name": "libonig2-5.9.2-13.6.1.i586",
                  "product_id": "libonig2-5.9.2-13.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-5.9.2-13.6.1.i586",
                "product": {
                  "name": "oniguruma-devel-5.9.2-13.6.1.i586",
                  "product_id": "oniguruma-devel-5.9.2-13.6.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig2-5.9.2-13.6.1.ppc64le",
                "product": {
                  "name": "libonig2-5.9.2-13.6.1.ppc64le",
                  "product_id": "libonig2-5.9.2-13.6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-5.9.2-13.6.1.ppc64le",
                "product": {
                  "name": "oniguruma-devel-5.9.2-13.6.1.ppc64le",
                  "product_id": "oniguruma-devel-5.9.2-13.6.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig2-5.9.2-13.6.1.s390",
                "product": {
                  "name": "libonig2-5.9.2-13.6.1.s390",
                  "product_id": "libonig2-5.9.2-13.6.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-5.9.2-13.6.1.s390",
                "product": {
                  "name": "oniguruma-devel-5.9.2-13.6.1.s390",
                  "product_id": "oniguruma-devel-5.9.2-13.6.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig2-5.9.2-13.6.1.s390x",
                "product": {
                  "name": "libonig2-5.9.2-13.6.1.s390x",
                  "product_id": "libonig2-5.9.2-13.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-5.9.2-13.6.1.s390x",
                "product": {
                  "name": "oniguruma-devel-5.9.2-13.6.1.s390x",
                  "product_id": "oniguruma-devel-5.9.2-13.6.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig2-5.9.2-13.6.1.x86_64",
                "product": {
                  "name": "libonig2-5.9.2-13.6.1.x86_64",
                  "product_id": "libonig2-5.9.2-13.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-5.9.2-13.6.1.x86_64",
                "product": {
                  "name": "oniguruma-devel-5.9.2-13.6.1.x86_64",
                  "product_id": "oniguruma-devel-5.9.2-13.6.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-5.9.2-13.6.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.aarch64"
        },
        "product_reference": "oniguruma-devel-5.9.2-13.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-5.9.2-13.6.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.ppc64le"
        },
        "product_reference": "oniguruma-devel-5.9.2-13.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-5.9.2-13.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.s390x"
        },
        "product_reference": "oniguruma-devel-5.9.2-13.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-5.9.2-13.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.x86_64"
        },
        "product_reference": "oniguruma-devel-5.9.2-13.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig2-5.9.2-13.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.aarch64"
        },
        "product_reference": "libonig2-5.9.2-13.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig2-5.9.2-13.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.ppc64le"
        },
        "product_reference": "libonig2-5.9.2-13.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig2-5.9.2-13.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.s390x"
        },
        "product_reference": "libonig2-5.9.2-13.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig2-5.9.2-13.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.x86_64"
        },
        "product_reference": "libonig2-5.9.2-13.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig2-5.9.2-13.6.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.aarch64"
        },
        "product_reference": "libonig2-5.9.2-13.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig2-5.9.2-13.6.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.ppc64le"
        },
        "product_reference": "libonig2-5.9.2-13.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig2-5.9.2-13.6.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.s390x"
        },
        "product_reference": "libonig2-5.9.2-13.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig2-5.9.2-13.6.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.x86_64"
        },
        "product_reference": "libonig2-5.9.2-13.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-26159",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-26159"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-26159",
          "url": "https://www.suse.com/security/cve/CVE-2020-26159"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177179 for CVE-2020-26159",
          "url": "https://bugzilla.suse.com/1177179"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203568 for CVE-2020-26159",
          "url": "https://bugzilla.suse.com/1203568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-21T10:37:46Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-26159"
    }
  ]
}

SUSE-SU-2022:3327-1

Vulnerability from csaf_suse - Published: 2022-09-21 10:47 - Updated: 2022-09-21 10:47

Summary

Security update for oniguruma

Notes

Title of the patch

Security update for oniguruma

Description of the patch

This update for oniguruma fixes the following issues: - CVE-2019-19246: Fixed an out of bounds access during regular expression matching (bsc#1157805). - CVE-2019-19204: Fixed an out of bounds access when compiling a crafted regular expression (bsc#1164569). - CVE-2019-19203: Fixed an out of bounds access when performing a string search (bsc#1164550). - CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling a crafted regular expression, which could lead to denial of service (bsc#1150130). - CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179). - CVE-2019-13224: Fixed a potential use-after-free when handling multiple different encodings (bsc#1142847).

Patchnames

SUSE-2022-3327,SUSE-SLE-Module-Basesystem-15-SP3-2022-3327,SUSE-SLE-Module-Basesystem-15-SP4-2022-3327,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3327,SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3327,SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3327,SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3327,SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3327,SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3327,SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3327,SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3327,SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3327,SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3327,SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3327,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3327,SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3327,SUSE-SUSE-MicroOS-5.1-2022-3327,SUSE-SUSE-MicroOS-5.2-2022-3327,SUSE-Storage-6-2022-3327,SUSE-Storage-7-2022-3327,openSUSE-Leap-Micro-5.2-2022-3327,openSUSE-SLE-15.3-2022-3327,openSUSE-SLE-15.4-2022-3327

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for oniguruma",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for oniguruma fixes the following issues:\n\n- CVE-2019-19246: Fixed an out of bounds access during regular\n  expression matching (bsc#1157805).\n- CVE-2019-19204: Fixed an out of bounds access when compiling a\n  crafted regular expression (bsc#1164569).\n- CVE-2019-19203: Fixed an out of bounds access when performing a\n  string search (bsc#1164550).\n- CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling\n  a crafted regular expression, which could lead to denial of service (bsc#1150130).\n- CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179).\n- CVE-2019-13224: Fixed a potential use-after-free when handling\n  multiple different encodings (bsc#1142847).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2022-3327,SUSE-SLE-Module-Basesystem-15-SP3-2022-3327,SUSE-SLE-Module-Basesystem-15-SP4-2022-3327,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3327,SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3327,SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3327,SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3327,SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3327,SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3327,SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3327,SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3327,SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3327,SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3327,SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3327,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3327,SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3327,SUSE-SUSE-MicroOS-5.1-2022-3327,SUSE-SUSE-MicroOS-5.2-2022-3327,SUSE-Storage-6-2022-3327,SUSE-Storage-7-2022-3327,openSUSE-Leap-Micro-5.2-2022-3327,openSUSE-SLE-15.3-2022-3327,openSUSE-SLE-15.4-2022-3327",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_3327-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2022:3327-1",
        "url": "https://www.suse.com/support/update/announcement/2022/suse-su-20223327-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2022:3327-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-September/012320.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1142847",
        "url": "https://bugzilla.suse.com/1142847"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1150130",
        "url": "https://bugzilla.suse.com/1150130"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1157805",
        "url": "https://bugzilla.suse.com/1157805"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1164550",
        "url": "https://bugzilla.suse.com/1164550"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1164569",
        "url": "https://bugzilla.suse.com/1164569"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177179",
        "url": "https://bugzilla.suse.com/1177179"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13224 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13224/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16163 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16163/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19203 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19203/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19204 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19204/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19246 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19246/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-26159 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-26159/"
      }
    ],
    "title": "Security update for oniguruma",
    "tracking": {
      "current_release_date": "2022-09-21T10:47:37Z",
      "generator": {
        "date": "2022-09-21T10:47:37Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2022:3327-1",
      "initial_release_date": "2022-09-21T10:47:37Z",
      "revision_history": [
        {
          "date": "2022-09-21T10:47:37Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig4-6.7.0-150000.3.3.1.aarch64",
                "product": {
                  "name": "libonig4-6.7.0-150000.3.3.1.aarch64",
                  "product_id": "libonig4-6.7.0-150000.3.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
                "product": {
                  "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
                  "product_id": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig4-6.7.0-150000.3.3.1.i586",
                "product": {
                  "name": "libonig4-6.7.0-150000.3.3.1.i586",
                  "product_id": "libonig4-6.7.0-150000.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-6.7.0-150000.3.3.1.i586",
                "product": {
                  "name": "oniguruma-devel-6.7.0-150000.3.3.1.i586",
                  "product_id": "oniguruma-devel-6.7.0-150000.3.3.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig4-6.7.0-150000.3.3.1.ppc64le",
                "product": {
                  "name": "libonig4-6.7.0-150000.3.3.1.ppc64le",
                  "product_id": "libonig4-6.7.0-150000.3.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
                "product": {
                  "name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
                  "product_id": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig4-6.7.0-150000.3.3.1.s390x",
                "product": {
                  "name": "libonig4-6.7.0-150000.3.3.1.s390x",
                  "product_id": "libonig4-6.7.0-150000.3.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
                "product": {
                  "name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
                  "product_id": "oniguruma-devel-6.7.0-150000.3.3.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libonig4-6.7.0-150000.3.3.1.x86_64",
                "product": {
                  "name": "libonig4-6.7.0-150000.3.3.1.x86_64",
                  "product_id": "libonig4-6.7.0-150000.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
                "product": {
                  "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
                  "product_id": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP3",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP4",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP1-BCL",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP1-BCL",
                  "product_id": "SUSE Linux Enterprise Server 15 SP1-BCL",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_bcl:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP1-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP1-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP2-BCL",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP2-BCL",
                  "product_id": "SUSE Linux Enterprise Server 15 SP2-BCL",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_bcl:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Proxy 4.1",
                "product": {
                  "name": "SUSE Manager Proxy 4.1",
                  "product_id": "SUSE Manager Proxy 4.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-proxy:4.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Retail Branch Server 4.1",
                "product": {
                  "name": "SUSE Manager Retail Branch Server 4.1",
                  "product_id": "SUSE Manager Retail Branch Server 4.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-retail-branch-server:4.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Server 4.1",
                "product": {
                  "name": "SUSE Manager Server 4.1",
                  "product_id": "SUSE Manager Server 4.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-server:4.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.1",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.1",
                  "product_id": "SUSE Linux Enterprise Micro 5.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-microos:5.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.2",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.2",
                  "product_id": "SUSE Linux Enterprise Micro 5.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-microos:5.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 6",
                "product": {
                  "name": "SUSE Enterprise Storage 6",
                  "product_id": "SUSE Enterprise Storage 6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 7",
                "product": {
                  "name": "SUSE Enterprise Storage 7",
                  "product_id": "SUSE Enterprise Storage 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap Micro 5.2",
                "product": {
                  "name": "openSUSE Leap Micro 5.2",
                  "product_id": "openSUSE Leap Micro 5.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap-micro:5.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.3",
                "product": {
                  "name": "openSUSE Leap 15.3",
                  "product_id": "openSUSE Leap 15.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.4",
                "product": {
                  "name": "openSUSE Leap 15.4",
                  "product_id": "openSUSE Leap 15.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-BCL",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-BCL",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Manager Proxy 4.1",
          "product_id": "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Manager Proxy 4.1",
          "product_id": "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Manager Retail Branch Server 4.1",
          "product_id": "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Retail Branch Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Manager Retail Branch Server 4.1",
          "product_id": "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Retail Branch Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Manager Server 4.1",
          "product_id": "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Manager Server 4.1",
          "product_id": "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Manager Server 4.1",
          "product_id": "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Manager Server 4.1",
          "product_id": "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of SUSE Manager Server 4.1",
          "product_id": "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Manager Server 4.1",
          "product_id": "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Enterprise Storage 6",
          "product_id": "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Enterprise Storage 6",
          "product_id": "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Enterprise Storage 6",
          "product_id": "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Enterprise Storage 6",
          "product_id": "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Enterprise Storage 7",
          "product_id": "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Enterprise Storage 7",
          "product_id": "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Enterprise Storage 7",
          "product_id": "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Enterprise Storage 7",
          "product_id": "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of openSUSE Leap Micro 5.2",
          "product_id": "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of openSUSE Leap Micro 5.2",
          "product_id": "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.s390x as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
        },
        "product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-13224",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13224"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13224",
          "url": "https://www.suse.com/security/cve/CVE-2019-13224"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1142847 for CVE-2019-13224",
          "url": "https://bugzilla.suse.com/1142847"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203568 for CVE-2019-13224",
          "url": "https://bugzilla.suse.com/1203568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-09-21T10:47:37Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13224"
    },
    {
      "cve": "CVE-2019-16163",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16163"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16163",
          "url": "https://www.suse.com/security/cve/CVE-2019-16163"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150130 for CVE-2019-16163",
          "url": "https://bugzilla.suse.com/1150130"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203568 for CVE-2019-16163",
          "url": "https://bugzilla.suse.com/1203568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-09-21T10:47:37Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16163"
    },
    {
      "cve": "CVE-2019-19203",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19203"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19203",
          "url": "https://www.suse.com/security/cve/CVE-2019-19203"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1164550 for CVE-2019-19203",
          "url": "https://bugzilla.suse.com/1164550"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203568 for CVE-2019-19203",
          "url": "https://bugzilla.suse.com/1203568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-09-21T10:47:37Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19203"
    },
    {
      "cve": "CVE-2019-19204",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19204"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19204",
          "url": "https://www.suse.com/security/cve/CVE-2019-19204"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1164569 for CVE-2019-19204",
          "url": "https://bugzilla.suse.com/1164569"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203568 for CVE-2019-19204",
          "url": "https://bugzilla.suse.com/1203568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-09-21T10:47:37Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19204"
    },
    {
      "cve": "CVE-2019-19246",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19246"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19246",
          "url": "https://www.suse.com/security/cve/CVE-2019-19246"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157805 for CVE-2019-19246",
          "url": "https://bugzilla.suse.com/1157805"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203568 for CVE-2019-19246",
          "url": "https://bugzilla.suse.com/1203568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-09-21T10:47:37Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19246"
    },
    {
      "cve": "CVE-2020-26159",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-26159"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
          "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
          "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
          "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
          "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-26159",
          "url": "https://www.suse.com/security/cve/CVE-2020-26159"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177179 for CVE-2020-26159",
          "url": "https://bugzilla.suse.com/1177179"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203568 for CVE-2020-26159",
          "url": "https://bugzilla.suse.com/1203568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
            "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
            "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-09-21T10:47:37Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-26159"
    }
  ]
}

MSRC_CVE-2020-26159

Vulnerability from csaf_microsoft - Published: 2020-09-02 00:00 - Updated: 2025-10-01 23:11

Summary

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none

Notes

Additional Resources

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer

The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

JSON

To clipboard

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2020-26159 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2020/msrc_cve-2020-26159.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none",
    "tracking": {
      "current_release_date": "2025-10-01T23:11:05.000Z",
      "generator": {
        "date": "2025-10-19T18:07:00.395Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2020-26159",
      "initial_release_date": "2020-09-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-10-01T23:11:05.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.0",
                "product": {
                  "name": "CBL Mariner 1.0",
                  "product_id": "16820"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccm1 oniguruma 6.9.5-2",
                "product": {
                  "name": "\u003ccm1 oniguruma 6.9.5-2",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "cm1 oniguruma 6.9.5-2",
                "product": {
                  "name": "cm1 oniguruma 6.9.5-2",
                  "product_id": "19158"
                }
              }
            ],
            "category": "product_name",
            "name": "oniguruma"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccm1 oniguruma 6.9.5-2 as a component of CBL Mariner 1.0",
          "product_id": "16820-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cm1 oniguruma 6.9.5-2 as a component of CBL Mariner 1.0",
          "product_id": "19158-16820"
        },
        "product_reference": "19158",
        "relates_to_product_reference": "16820"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-26159",
      "notes": [
        {
          "category": "general",
          "text": "mitre",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "19158-16820"
        ],
        "known_affected": [
          "16820-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2020-26159 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2020/msrc_cve-2020-26159.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-01T23:11:05.000Z",
          "details": "6.9.5-2:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "16820-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "title": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2020-26159 (GCVE-0-2020-26159)

OPENSUSE-SU-2024:11111-1

GSD-2020-26159

FKIE_CVE-2020-26159

GHSA-JCJP-J466-5XXG

SUSE-SU-2024:2993-1

SUSE-SU-2022:3327-1

MSRC_CVE-2020-26159

Tags

Sightings

Nomenclature