Medium ALAS2023-2025-960 1 CVE

Moderate: gnuplot security update (Amazon Linux 2023)

Published May 7, 2025 · Updated May 13, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-3359: A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.

Fixed packages 8

Release	Package	Fixed in
Amazon Linux · 2023	gnuplot-common	0:5.4.3-3.amzn2023.0.4
Amazon Linux · 2023	gnuplot-common-debuginfo	0:5.4.3-3.amzn2023.0.4
Amazon Linux · 2023	gnuplot-debuginfo	0:5.4.3-3.amzn2023.0.4
Amazon Linux · 2023	gnuplot-debugsource	0:5.4.3-3.amzn2023.0.4
Amazon Linux · 2023	gnuplot-doc	0:5.4.3-3.amzn2023.0.4
Amazon Linux · 2023	gnuplot-latex	0:5.4.3-3.amzn2023.0.4
Amazon Linux · 2023	gnuplot-minimal	0:5.4.3-3.amzn2023.0.4
Amazon Linux · 2023	gnuplot-minimal-debuginfo	0:5.4.3-3.amzn2023.0.4

Vulnerabilities 1

Medium 6.2

CVE-2025-3359

Gnuplot: segmentation fault via io_str_init_static_internal function

A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.

Red Hat Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux

Apr 7, 2025

References

web
https://alas.aws.amazon.com/cve/html/CVE-2025-3359.html