CVE-2025-31181:
A flaw was found in gnuplot. The X11_graphics() function may lead to a
segmentation fault and cause a system crash.
Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-31181]
Upstream patches:
[af96c2c1b2/]
Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
CVE-2025-31180:
A flaw was found in gnuplot. The CANVAS_text() function may lead to a
segmentation fault and cause a system crash.
Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-31180]
Upstream patches:
[b2343fd02c/]
Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
CVE-2025-31179:
A flaw was found in gnuplot. The xstrftime() function may lead to a
segmentation fault, causing a system crash.
Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-31179]
Upstream patches:
[ed647df512/]
Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
CVE-2025-31178:
A flaw was found in gnuplot. The GetAnnotateString() function may lead to a
segmentation fault and cause a system crash.
Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-31178]
Upstream patches:
[b78cc829a1/]
Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
CVE-2025-31177:
gnuplot is affected by a heap buffer overflow at function utf8_copy_one.
Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-31177]
Upstream patches:
[226809aebb/]
Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
CVE-2025-31176:
A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation
fault and cause a system crash.
Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-31176]
Upstream patches:
[b456a3ef61/]
Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
CVE-2025-3359:
A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal
may jeopardize the environment.
Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-3359]
Upstream patches:
[a5897feadc/]
Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
We do not carry recipe for libcerf, so disable it explicitly so the
native builds are also a bit more deterministic.
Fix a typo in knob to disable wxwidgets
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=========
NEW "set pm3d border retrace" will use quadrangle color for the border
NEW "nogrid" flag for plots to opt out of dgrid3d processing
NEW option "above|below y=<val>" for "plot with fillsteps"
NEW "set style histogram nokeyseparators" suppress blank key entries Bug #2473
CHANGE always allow palette color for non-plot elements of 2D plot
FIX contours were incorrectly allocated space in the key even if "notitle"
FIX evaluation of unary minus in front of ternary operator Bug #2468
FIX arm and s390 require "signed char" Bugs #2467#2450
FIX range errors if "smooth csplines" applied with x-axis reversed Bug #2465
FIX handle various corner cases found by fuzzing
FIX textcolor should accept "linetype N" Bug #2459
FIX Windows: handling of Window messages for piped input Bugs #2204#2412
FIX aquaterm: auto-configuration use of Frameworks Bug #2419
FIX qt: pm3d quadrangle borders for transparent surfaces
FIX png/gif: gdlib auto-configuration issues
FIX dumb: limit enhanced text markup to single-line vertical displacement
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
