ALAS2023-2025-960


Amazon Linux 2023 Security Advisory: ALAS2023-2025-960
Advisory Released Date: 2025-05-13
Advisory Updated Date: 2025-05-13
Severity: Medium

Issue Overview:

A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment. (CVE-2025-3359)


Affected Packages:

gnuplot


Issue Correction:
Run dnf update gnuplot --releasever 2023.7.20250512 to update your system.

New Packages:
aarch64:
    gnuplot-minimal-debuginfo-5.4.3-3.amzn2023.0.4.aarch64
    gnuplot-common-debuginfo-5.4.3-3.amzn2023.0.4.aarch64
    gnuplot-debuginfo-5.4.3-3.amzn2023.0.4.aarch64
    gnuplot-common-5.4.3-3.amzn2023.0.4.aarch64
    gnuplot-debugsource-5.4.3-3.amzn2023.0.4.aarch64
    gnuplot-minimal-5.4.3-3.amzn2023.0.4.aarch64

noarch:
    gnuplot-latex-5.4.3-3.amzn2023.0.4.noarch
    gnuplot-doc-5.4.3-3.amzn2023.0.4.noarch

src:
    gnuplot-5.4.3-3.amzn2023.0.4.src

x86_64:
    gnuplot-common-debuginfo-5.4.3-3.amzn2023.0.4.x86_64
    gnuplot-debuginfo-5.4.3-3.amzn2023.0.4.x86_64
    gnuplot-debugsource-5.4.3-3.amzn2023.0.4.x86_64
    gnuplot-common-5.4.3-3.amzn2023.0.4.x86_64
    gnuplot-minimal-debuginfo-5.4.3-3.amzn2023.0.4.x86_64
    gnuplot-minimal-5.4.3-3.amzn2023.0.4.x86_64