Bug 2357749 (CVE-2025-3359)

Summary:	CVE-2025-3359 gnuplot: Segmentation fault via IO_str_init_static_internal function
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	orion
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2357751, 2357752
Bug Blocks:

Description OSIDB Bzimport 2025-04-07 01:40:13 UTC

A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.

Comment 2 Orion Poplawski 2025-09-13 23:00:59 UTC

This is fixed upstream with this commit:

commit a5897feadc4be73b0ffd8458556c47117bd24d03
Author: Ethan A Merritt <merritt.edu>
Date:   Tue Mar 25 22:51:54 2025 -0700

    hpgl: font name parsing overruns the string by one char

    if no comma is present in the font name.
    E.g.
       set term pcl
       set title "Title" font "sans"    # no comma in font name
       plot x

    Bug 2781

Not yet released.