Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 6 articles for you...
100
security advisorymoderateSuSESUSE: gnuplot Moderate Security Flaws CVE-2025-31176 to CVE-2025-3359
* bsc#1240325 * bsc#1240326 * bsc#1240327 * bsc#1240328 * bsc#1240329 . # Security update for gnuplot Announcement ID: SUSE-SU-2025:01811-2 Release Date: 2025-07-16T14:49:36Z Rating: moderate References: * bsc#1240325 * bsc#1240326 * bsc#1240327 * bsc#1240328 * bsc#1240329 * bsc#1240330 * bsc#1241684 Cross-References: * CVE-2025-31176 * CVE-2025-31177 * CVE-2025-31178 * CVE-2025-31179 * CVE-2025-31180 * CVE-2025-31181 * CVE-2025-3359 CVSS scores: * CVE-2025-31176 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31176 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31177 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31178 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31178 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31179 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31179 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31180 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31180 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31181 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31181 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-3359 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-3359 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-3359 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves seven vulnerabilities can now be installed. ## Description: This update for gnuplot fixes the following issues: * CVE-2025-31176: invalid read leads to segmentation fault onplot3d_points (bsc#1240325). * CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8_copy_one (bsc#1240326). * CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327). * CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1240328). * CVE-2025-31180: unchecked invalid pointer access leads to segmentation fault on CANVAS_text (bsc#1240329). * CVE-2025-31181: double fclose() call leads to segmentation fault on X11_graphics (bsc#1240330). * CVE-2025-3359: out-of-bounds read when parsing font names may lead to a segmentation fault (bsc#1241684). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2025-1811=1 ## Package List: * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * gnuplot-debugsource-5.4.3-150400.3.3.1 * gnuplot-5.4.3-150400.3.3.1 * gnuplot-debuginfo-5.4.3-150400.3.3.1 * Server Applications Module 15-SP7 (noarch) * gnuplot-doc-5.4.3-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-31176.html * https://www.suse.com/security/cve/CVE-2025-31177.html * https://www.suse.com/security/cve/CVE-2025-31178.html * https://www.suse.com/security/cve/CVE-2025-31179.html * https://www.suse.com/security/cve/CVE-2025-31180.html * https://www.suse.com/security/cve/CVE-2025-31181.html * https://www.suse.com/security/cve/CVE-2025-3359.html * https://bugzilla.suse.com/show_bug.cgi?id=1240325 * https://bugzilla.suse.com/show_bug.cgi?id=1240326 * https://bugzilla.suse.com/show_bug.cgi?id=1240327 * https://bugzilla.suse.com/show_bug.cgi?id=1240328 * https://bugzilla.suse.com/show_bug.cgi?id=1240329 *https://bugzilla.suse.com/show_bug.cgi?id=1240330 * https://bugzilla.suse.com/show_bug.cgi?id=1241684 . The latest release of gnuplot tackles a series of problems, focusing specifically on severe segmentation faults and vulnerabilities related to memory safety in OpenSUSE.. gnuplot security update, SUSE vulnerabilities, moderate security advisory. . LinuxSecurity.com Team
Jul 16, 2025
SuSE
172
security advisorydenial of servicebuffer overflowUbuntu 20.04: USN-7589-1 important: Gnuplot buffer overflow
Several security issues were fixed in Gnuplot.. ========================================================================== Ubuntu Security Notice USN-7589-1 June 23, 2025 gnuplot vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Gnuplot. Software Description: - gnuplot: A portable command-line driven graphing utility. Details: Tim Blazytko, Cornelius Aschermann, Sergej Schumilo, and Nils Bars discovered that Gnuplot had several memory-related issues. An attacker could possibly use these issues to cause Gnuplot to experience a buffer overflow, resulting in a denial of service or arbitrary code execution. These issues only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-19490, CVE-2018-19491, CVE-2018-19492) It was discovered that Gnuplot could write out-of-bounds due to the use of strncpy(). An attacker could possibly use this issue to enable the execution of arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-25412) It was discovered that Gnuplot incorrectly freed memory when executing print_set_output(). An attacker could possibly use this issue to enable the execution of arbitrary code. (CVE-2020-25559) It was discovered that Gnuplot's plotrequest() function contained a buffer overflow. An attacker could possibly use this issue to cause Gnuplot to crash, resulting in a denial of service or arbitrary code execution. (CVE-2020-25969) It was discovered that Gnuplot's boundary3d() function could be made to divide by zero. An attacker could possibly use this issue to cause Gnuplot to crash, resulting in a denial of service. (CVE-2021-44917) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS gnuplot 5.2.8+dfsg1-2ubuntu0.1~esm1 Available with Ubuntu Pro gnuplot-data 5.2.8+dfsg1-2ubuntu0.1~esm1 Available with Ubuntu Pro gnuplot-nox 5.2.8+dfsg1-2ubuntu0.1~esm1 Available with Ubuntu Pro gnuplot-qt 5.2.8+dfsg1-2ubuntu0.1~esm1 Available with Ubuntu Pro gnuplot-x11 5.2.8+dfsg1-2ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS gnuplot 5.2.2+dfsg1-2ubuntu1+esm1 Available with Ubuntu Pro gnuplot-data 5.2.2+dfsg1-2ubuntu1+esm1 Available with Ubuntu Pro gnuplot-nox 5.2.2+dfsg1-2ubuntu1+esm1 Available with Ubuntu Pro gnuplot-qt 5.2.2+dfsg1-2ubuntu1+esm1 Available with Ubuntu Pro gnuplot-x11 5.2.2+dfsg1-2ubuntu1+esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS gnuplot 4.6.6-3ubuntu0.1+esm1 Available with Ubuntu Pro gnuplot-data 4.6.6-3ubuntu0.1+esm1 Available with Ubuntu Pro gnuplot-nox 4.6.6-3ubuntu0.1+esm1 Available with Ubuntu Pro gnuplot-qt 4.6.6-3ubuntu0.1+esm1 Available with Ubuntu Pro gnuplot-tex 4.6.6-3ubuntu0.1+esm1 Available with Ubuntu Pro gnuplot-x11 4.6.6-3ubuntu0.1+esm1 Available with Ubuntu Pro Ubuntu 14.04 LTS gnuplot 4.6.4-2ubuntu0.1~esm1 Available with Ubuntu Pro gnuplot-nox 4.6.4-2ubuntu0.1~esm1 Available with Ubuntu Pro gnuplot-qt 4.6.4-2ubuntu0.1~esm1 Available with Ubuntu Pro gnuplot-x11 4.6.4-2ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7589-1 CVE-2018-19490, CVE-2018-19491, CVE-2018-19492, CVE-2020-25412, CVE-2020-25559, CVE-2020-25969, CVE-2021-44917 . Multiple security flaws in Gnuplot for Ubuntu 14.04 LTS and 20.04 LTS addressed; essential updates recommended for safeguarding.. Gnuplot security alert, Ubuntu update notice, buffer overflow fix. . Severity: Important. LinuxSecurity.com Team
Jun 24, 2025
•Important
Ubuntu
100
security advisoryupdatebuffer overflowSUSE: 2025:01811-1 moderate: gnuplot security update addressing segfaults
* bsc#1240325 * bsc#1240326 * bsc#1240327 * bsc#1240328 * bsc#1240329 . # Security update for gnuplot Announcement ID: SUSE-SU-2025:01811-1 Release Date: 2025-06-04T09:29:58Z Rating: moderate References: * bsc#1240325 * bsc#1240326 * bsc#1240327 * bsc#1240328 * bsc#1240329 * bsc#1240330 * bsc#1241684 Cross-References: * CVE-2025-31176 * CVE-2025-31177 * CVE-2025-31178 * CVE-2025-31179 * CVE-2025-31180 * CVE-2025-31181 * CVE-2025-3359 CVSS scores: * CVE-2025-31176 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31176 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31177 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31178 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31178 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31179 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31179 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31180 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31180 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31181 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31181 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-3359 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-3359 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-3359 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves seven vulnerabilities can now be installed. ## Description: This update for gnuplot fixes the following issues: * CVE-2025-31176: invalidread leads to segmentation fault on plot3d_points (bsc#1240325). * CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8_copy_one (bsc#1240326). * CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327). * CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1240328). * CVE-2025-31180: unchecked invalid pointer access leads to segmentation fault on CANVAS_text (bsc#1240329). * CVE-2025-31181: double fclose() call leads to segmentation fault on X11_graphics (bsc#1240330). * CVE-2025-3359: out-of-bounds read when parsing font names may lead to a segmentation fault (bsc#1241684). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1811=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1811=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-1811=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * gnuplot-debugsource-5.4.3-150400.3.3.1 * gnuplot-debuginfo-5.4.3-150400.3.3.1 * gnuplot-5.4.3-150400.3.3.1 * openSUSE Leap 15.4 (noarch) * gnuplot-doc-5.4.3-150400.3.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * gnuplot-debugsource-5.4.3-150400.3.3.1 * gnuplot-debuginfo-5.4.3-150400.3.3.1 * gnuplot-5.4.3-150400.3.3.1 * openSUSE Leap 15.6 (noarch) * gnuplot-doc-5.4.3-150400.3.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * gnuplot-debugsource-5.4.3-150400.3.3.1 * gnuplot-debuginfo-5.4.3-150400.3.3.1 * gnuplot-5.4.3-150400.3.3.1 * Server Applications Module 15-SP6 (noarch) * gnuplot-doc-5.4.3-150400.3.3.1 ## References: *https://www.suse.com/security/cve/CVE-2025-31176.html * https://www.suse.com/security/cve/CVE-2025-31177.html * https://www.suse.com/security/cve/CVE-2025-31178.html * https://www.suse.com/security/cve/CVE-2025-31179.html * https://www.suse.com/security/cve/CVE-2025-31180.html * https://www.suse.com/security/cve/CVE-2025-31181.html * https://www.suse.com/security/cve/CVE-2025-3359.html * https://bugzilla.suse.com/show_bug.cgi?id=1240325 * https://bugzilla.suse.com/show_bug.cgi?id=1240326 * https://bugzilla.suse.com/show_bug.cgi?id=1240327 * https://bugzilla.suse.com/show_bug.cgi?id=1240328 * https://bugzilla.suse.com/show_bug.cgi?id=1240329 * https://bugzilla.suse.com/show_bug.cgi?id=1240330 * https://bugzilla.suse.com/show_bug.cgi?id=1241684 . The Ubuntu patch addresses multiple gnuplot concerns such as memory leaks and access violations, improving overall system reliability.. SUSE Gnuplot Security Update, Linux Gnuplot Vulnerabilities, OpenSUSE Patch Instructions. . LinuxSecurity.com Team
Jun 04, 2025
SuSE
202
security advisorymoderatesecurity patchopenSUSE Leap 15.4/15.6: gnuplot receives important security update
An update that solves seven vulnerabilities can now be installed.. # Security update for gnuplot Announcement ID: SUSE-SU-2025:01811-1 Release Date: 2025-06-04T09:29:58Z Rating: moderate References: * bsc#1240325 * bsc#1240326 * bsc#1240327 * bsc#1240328 * bsc#1240329 * bsc#1240330 * bsc#1241684 Cross-References: * CVE-2025-31176 * CVE-2025-31177 * CVE-2025-31178 * CVE-2025-31179 * CVE-2025-31180 * CVE-2025-31181 * CVE-2025-3359 CVSS scores: * CVE-2025-31176 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31176 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31177 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31178 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31178 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31179 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31179 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31180 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31180 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31181 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31181 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-3359 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-3359 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-3359 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves seven vulnerabilities can now be installed. ## Description: This update for gnuplot fixes the following issues: * CVE-2025-31176: invalid readleads to segmentation fault on plot3d_points (bsc#1240325). * CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8_copy_one (bsc#1240326). * CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327). * CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1240328). * CVE-2025-31180: unchecked invalid pointer access leads to segmentation fault on CANVAS_text (bsc#1240329). * CVE-2025-31181: double fclose() call leads to segmentation fault on X11_graphics (bsc#1240330). * CVE-2025-3359: out-of-bounds read when parsing font names may lead to a segmentation fault (bsc#1241684). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1811=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1811=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-1811=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * gnuplot-debugsource-5.4.3-150400.3.3.1 * gnuplot-debuginfo-5.4.3-150400.3.3.1 * gnuplot-5.4.3-150400.3.3.1 * openSUSE Leap 15.4 (noarch) * gnuplot-doc-5.4.3-150400.3.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * gnuplot-debugsource-5.4.3-150400.3.3.1 * gnuplot-debuginfo-5.4.3-150400.3.3.1 * gnuplot-5.4.3-150400.3.3.1 * openSUSE Leap 15.6 (noarch) * gnuplot-doc-5.4.3-150400.3.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * gnuplot-debugsource-5.4.3-150400.3.3.1 * gnuplot-debuginfo-5.4.3-150400.3.3.1 * gnuplot-5.4.3-150400.3.3.1 * Server Applications Module 15-SP6 (noarch) * gnuplot-doc-5.4.3-150400.3.3.1 ## References: *https://www.suse.com/security/cve/CVE-2025-31176.html * https://www.suse.com/security/cve/CVE-2025-31177.html * https://www.suse.com/security/cve/CVE-2025-31178.html * https://www.suse.com/security/cve/CVE-2025-31179.html * https://www.suse.com/security/cve/CVE-2025-31180.html * https://www.suse.com/security/cve/CVE-2025-31181.html * https://www.suse.com/security/cve/CVE-2025-3359.html * https://bugzilla.suse.com/show_bug.cgi?id=1240325 * https://bugzilla.suse.com/show_bug.cgi?id=1240326 * https://bugzilla.suse.com/show_bug.cgi?id=1240327 * https://bugzilla.suse.com/show_bug.cgi?id=1240328 * https://bugzilla.suse.com/show_bug.cgi?id=1240329 * https://bugzilla.suse.com/show_bug.cgi?id=1240330 * https://bugzilla.suse.com/show_bug.cgi?id=1241684 . Urgent patches addressed various vulnerabilities in gnuplot for openSUSE environments. Discover the details of the enhancements.. gnuplot security update, openSUSE advisory, moderate severity, security patch details. . Severity: Important. LinuxSecurity.com Team
Jun 04, 2025
•Important
OpenSUSE
100
security advisorymoderatepatchSUSE: 2025:01805-1 moderate: gnuplot update for segmentation faults
* bsc#1240327 * bsc#1240328 * bsc#1240330 * bsc#1241684 . # Security update for gnuplot Announcement ID: SUSE-SU-2025:01805-1 Release Date: 2025-06-03T11:57:54Z Rating: moderate References: * bsc#1240327 * bsc#1240328 * bsc#1240330 * bsc#1241684 Cross-References: * CVE-2025-31178 * CVE-2025-31179 * CVE-2025-31181 * CVE-2025-3359 CVSS scores: * CVE-2025-31178 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31178 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31179 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31179 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31181 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31181 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-3359 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-3359 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-3359 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for gnuplot fixes the following issues: * CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327). * CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1240328). * CVE-2025-31181: double fclose() call leads to segmentation fault on X11_graphics (bsc#1240330). * CVE-2025-3359: out-of-bounds read when parsing font names may lead to a segmentation fault (bsc#1241684). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively youcan run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-1805=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * gnuplot-4.6.5-3.9.1 * gnuplot-debuginfo-4.6.5-3.9.1 * gnuplot-debugsource-4.6.5-3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2025-31178.html * https://www.suse.com/security/cve/CVE-2025-31179.html * https://www.suse.com/security/cve/CVE-2025-31181.html * https://www.suse.com/security/cve/CVE-2025-3359.html * https://bugzilla.suse.com/show_bug.cgi?id=1240327 * https://bugzilla.suse.com/show_bug.cgi?id=1240328 * https://bugzilla.suse.com/show_bug.cgi?id=1240330 * https://bugzilla.suse.com/show_bug.cgi?id=1241684 . A recent gnuplot update addresses various segmentation errors on SUSE Linux Enterprise Server. Users are encouraged to apply the necessary patches.. SUSE Linux, gnuplot security, moderate patch, segmentation fault fix, update instructions. . LinuxSecurity.com Team
Jun 04, 2025
SuSE
202
security advisorymoderateupdateopenSUSE Tumbleweed: 2025:15134-1 moderate: gnuplot-6.0.2 update
An update that solves 7 vulnerabilities can now be installed.. # gnuplot-6.0.2-3.1 on GA media Announcement ID: openSUSE-SU-2025:15134-1 Rating: moderate Cross-References: * CVE-2025-31176 * CVE-2025-31177 * CVE-2025-31178 * CVE-2025-31179 * CVE-2025-31180 * CVE-2025-31181 * CVE-2025-3359 CVSS scores: * CVE-2025-31176 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31178 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31179 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31180 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-31181 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-3359 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-3359 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves 7 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the gnuplot-6.0.2-3.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * gnuplot 6.0.2-3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-31176.html * https://www.suse.com/security/cve/CVE-2025-31177.html * https://www.suse.com/security/cve/CVE-2025-31178.html * https://www.suse.com/security/cve/CVE-2025-31179.html * https://www.suse.com/security/cve/CVE-2025-31180.html * https://www.suse.com/security/cve/CVE-2025-31181.html * https://www.suse.com/security/cve/CVE-2025-3359.html . The latest gnuplot-6.0.2-3.1 release on openSUSE resolves 7 security vulnerabilities categorized with moderate risk.. gnuplot update, openSUSE security, moderate threats, software advisory. . LinuxSecurity.com Team
May 21, 2025
OpenSUSE
203
security advisorycriticalsecurity fixMageia 7: 2021-01-27 Critical Vulnerability in Gnuplot Double Free
Double free when executing print_set_output() (CVE-2020-25559). Additionally, a missing require for gnuplot has been added to gnuplot-qt package. . MGASA-2021-0127 - Updated gnuplot packages fix a security vulnerability Publication date: 12 Mar 2021 URL: https://advisories.mageia.org/MGASA-2021-0127.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-25559 Double free when executing print_set_output() (CVE-2020-25559). Additionally, a missing require for gnuplot has been added to gnuplot-qt package. References: - https://bugs.mageia.org/show_bug.cgi?id=28553 - - https://www.cve.org/CVERecord?id=CVE-2020-25559 SRPMS: - 7/core/gnuplot-5.2.2-5.2.mga7 . Revised gnuplot software in Mageia addresses a significant double free vulnerability. Refer to the security notice for more information on the resolution.. gnuplot security update, Mageia advisory, double free fix, security patch, software update. . Severity: Critical. LinuxSecurity.com Team
Mar 11, 2021
•Critical
Mageia
202
security advisorymoderateupdateopenSUSE Leap 15.2: SUSE-SU-2021:0345-1 Moderate: Gnuplot Issue
An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for gnuplot ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0345-1 Rating: moderate References: #1176689 Cross-References: CVE-2020-25559 CVSS scores: CVE-2020-25559 (SUSE): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gnuplot fixes the following issues: - CVE-2020-25559: Fixed double free when executing print_set_output() (bsc#1176689). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-345=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): gnuplot-5.2.2-lp152.6.3.1 gnuplot-debuginfo-5.2.2-lp152.6.3.1 gnuplot-debugsource-5.2.2-lp152.6.3.1 - openSUSE Leap 15.2 (noarch): gnuplot-doc-5.2.2-lp152.6.3.1 References: https://www.suse.com/security/cve/CVE-2020-25559.html https://bugzilla.suse.com/1176689 . The recent openSUSE Security Update for Gnuplot tackles urgent vulnerabilities linked to CVE-2021-22574, which could compromise system integrity.. openSUSE Update, Gnuplot Patch, Security Update. . LinuxSecurity.com Team
Feb 26, 2021
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!