Nixpkgs security tracker

Untriaged

Permalink CVE-2025-31177

6.2 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 11 months, 1 week ago

Gnuplot: gnuplot heap-buffer overflow on utf8_copy_one

gnuplot is affected by a heap buffer overflow at function utf8_copy_one.

References

https://access.redhat.com/security/cve/CVE-2025-31177 vdb-entryx_refsource_REDHAT
RHBZ#2355342 issue-trackingx_refsource_REDHAT

Affected products

gnuplot

<6.0

Matching in nixpkgs

pkgs.gnuplot

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.gnuplot_qt

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.feedgnuplot

General purpose pipe-oriented plotting tool

nixos-unstable 1.61
- nixpkgs-unstable 1.61
- nixos-unstable-small 1.61

pkgs.gnuplot_aquaterm

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.emacsPackages.gnuplot

None

nixos-unstable 20240914.1522
- nixpkgs-unstable 20240914.1522
- nixos-unstable-small 20240914.1522

pkgs.haskellPackages.gnuplot

2D and 3D plots using gnuplot

nixos-unstable 0.5.7
- nixpkgs-unstable 0.5.7
- nixos-unstable-small 0.5.7

pkgs.emacsPackages.gnuplot-mode

None

nixos-unstable 20171013.1616
- nixpkgs-unstable 20171013.1616
- nixos-unstable-small 20171013.1616

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

A simple interface to Gnuplot

nixos-unstable 0.4.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@mnacamura Mitsuhiro Nakamura <m.nacamura@gmail.com>
@lovek323 Jason O'Conal <jason@oconal.id.au>
@thielema Henning Thielemann <nix@henning-thielemann.de>

Untriaged

Permalink CVE-2025-3359

6.2 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 year ago

Gnuplot: segmentation fault via io_str_init_static_internal function

A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.

References

https://access.redhat.com/security/cve/CVE-2025-3359 vdb-entryx_refsource_REDHAT
RHBZ#2357749 issue-trackingx_refsource_REDHAT

Affected products

gnuplot

<6.1

Matching in nixpkgs

pkgs.gnuplot

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.gnuplot_qt

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.feedgnuplot

General purpose pipe-oriented plotting tool

nixos-unstable 1.61
- nixpkgs-unstable 1.61
- nixos-unstable-small 1.61

pkgs.gnuplot_aquaterm

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.emacsPackages.gnuplot

None

nixos-unstable 20240914.1522
- nixpkgs-unstable 20240914.1522
- nixos-unstable-small 20240914.1522

pkgs.haskellPackages.gnuplot

2D and 3D plots using gnuplot

nixos-unstable 0.5.7
- nixpkgs-unstable 0.5.7
- nixos-unstable-small 0.5.7

pkgs.emacsPackages.gnuplot-mode

None

nixos-unstable 20171013.1616
- nixpkgs-unstable 20171013.1616
- nixos-unstable-small 20171013.1616

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

A simple interface to Gnuplot

nixos-unstable 0.4.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@mnacamura Mitsuhiro Nakamura <m.nacamura@gmail.com>
@lovek323 Jason O'Conal <jason@oconal.id.au>
@thielema Henning Thielemann <nix@henning-thielemann.de>

Untriaged

Permalink CVE-2025-31176

6.2 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 year ago

Gnuplot: gnuplot segmentation fault on plot3d_points

A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.

References

https://access.redhat.com/security/cve/CVE-2025-31176 vdb-entryx_refsource_REDHAT
RHBZ#2355343 issue-trackingx_refsource_REDHAT

Affected products

gnuplot

<6.0

Matching in nixpkgs

pkgs.gnuplot

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.gnuplot_qt

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.feedgnuplot

General purpose pipe-oriented plotting tool

nixos-unstable 1.61
- nixpkgs-unstable 1.61
- nixos-unstable-small 1.61

pkgs.gnuplot_aquaterm

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.emacsPackages.gnuplot

None

nixos-unstable 20240914.1522
- nixpkgs-unstable 20240914.1522
- nixos-unstable-small 20240914.1522

pkgs.haskellPackages.gnuplot

2D and 3D plots using gnuplot

nixos-unstable 0.5.7
- nixpkgs-unstable 0.5.7
- nixos-unstable-small 0.5.7

pkgs.emacsPackages.gnuplot-mode

None

nixos-unstable 20171013.1616
- nixpkgs-unstable 20171013.1616
- nixos-unstable-small 20171013.1616

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

A simple interface to Gnuplot

nixos-unstable 0.4.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@mnacamura Mitsuhiro Nakamura <m.nacamura@gmail.com>
@lovek323 Jason O'Conal <jason@oconal.id.au>
@thielema Henning Thielemann <nix@henning-thielemann.de>

Untriaged

Permalink CVE-2025-31180

6.2 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 year ago

Gnuplot: gnuplot segmentation fault on canvas_text

A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.

References

https://access.redhat.com/security/cve/CVE-2025-31180 vdb-entryx_refsource_REDHAT
RHBZ#2355339 issue-trackingx_refsource_REDHAT

Affected products

gnuplot

<6.0

Matching in nixpkgs

pkgs.gnuplot

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.gnuplot_qt

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.feedgnuplot

General purpose pipe-oriented plotting tool

nixos-unstable 1.61
- nixpkgs-unstable 1.61
- nixos-unstable-small 1.61

pkgs.gnuplot_aquaterm

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.emacsPackages.gnuplot

None

nixos-unstable 20240914.1522
- nixpkgs-unstable 20240914.1522
- nixos-unstable-small 20240914.1522

pkgs.haskellPackages.gnuplot

2D and 3D plots using gnuplot

nixos-unstable 0.5.7
- nixpkgs-unstable 0.5.7
- nixos-unstable-small 0.5.7

pkgs.emacsPackages.gnuplot-mode

None

nixos-unstable 20171013.1616
- nixpkgs-unstable 20171013.1616
- nixos-unstable-small 20171013.1616

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

A simple interface to Gnuplot

nixos-unstable 0.4.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@mnacamura Mitsuhiro Nakamura <m.nacamura@gmail.com>
@lovek323 Jason O'Conal <jason@oconal.id.au>
@thielema Henning Thielemann <nix@henning-thielemann.de>

Untriaged

Permalink CVE-2025-31179

6.2 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 year ago

Gnuplot: gnuplot segmentation fault on xstrftime

A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.

References

https://access.redhat.com/security/cve/CVE-2025-31179 vdb-entryx_refsource_REDHAT
RHBZ#2355340 issue-trackingx_refsource_REDHAT

Affected products

gnuplot

<6.0

Matching in nixpkgs

pkgs.gnuplot

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.gnuplot_qt

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.feedgnuplot

General purpose pipe-oriented plotting tool

nixos-unstable 1.61
- nixpkgs-unstable 1.61
- nixos-unstable-small 1.61

pkgs.gnuplot_aquaterm

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.emacsPackages.gnuplot

None

nixos-unstable 20240914.1522
- nixpkgs-unstable 20240914.1522
- nixos-unstable-small 20240914.1522

pkgs.haskellPackages.gnuplot

2D and 3D plots using gnuplot

nixos-unstable 0.5.7
- nixpkgs-unstable 0.5.7
- nixos-unstable-small 0.5.7

pkgs.emacsPackages.gnuplot-mode

None

nixos-unstable 20171013.1616
- nixpkgs-unstable 20171013.1616
- nixos-unstable-small 20171013.1616

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

A simple interface to Gnuplot

nixos-unstable 0.4.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@mnacamura Mitsuhiro Nakamura <m.nacamura@gmail.com>
@lovek323 Jason O'Conal <jason@oconal.id.au>
@thielema Henning Thielemann <nix@henning-thielemann.de>

Untriaged

Permalink CVE-2025-31178

6.2 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 year ago

Gnuplot: gnuplot segmentation fault on getannotatestring

A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.

References

https://access.redhat.com/security/cve/CVE-2025-31178 vdb-entryx_refsource_REDHAT
RHBZ#2355341 issue-trackingx_refsource_REDHAT

Affected products

gnuplot

<6.0

Matching in nixpkgs

pkgs.gnuplot

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.gnuplot_qt

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.feedgnuplot

General purpose pipe-oriented plotting tool

nixos-unstable 1.61
- nixpkgs-unstable 1.61
- nixos-unstable-small 1.61

pkgs.gnuplot_aquaterm

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.emacsPackages.gnuplot

None

nixos-unstable 20240914.1522
- nixpkgs-unstable 20240914.1522
- nixos-unstable-small 20240914.1522

pkgs.haskellPackages.gnuplot

2D and 3D plots using gnuplot

nixos-unstable 0.5.7
- nixpkgs-unstable 0.5.7
- nixos-unstable-small 0.5.7

pkgs.emacsPackages.gnuplot-mode

None

nixos-unstable 20171013.1616
- nixpkgs-unstable 20171013.1616
- nixos-unstable-small 20171013.1616

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

A simple interface to Gnuplot

nixos-unstable 0.4.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@mnacamura Mitsuhiro Nakamura <m.nacamura@gmail.com>
@lovek323 Jason O'Conal <jason@oconal.id.au>
@thielema Henning Thielemann <nix@henning-thielemann.de>

Untriaged

Permalink CVE-2025-31181

6.2 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 year ago

Gnuplot: gnuplot segmentation fault on x11_graphics

A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.

References

https://access.redhat.com/security/cve/CVE-2025-31181 vdb-entryx_refsource_REDHAT
RHBZ#2355338 issue-trackingx_refsource_REDHAT

Affected products

gnuplot

<6.1

Matching in nixpkgs

pkgs.gnuplot

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.gnuplot_qt

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.feedgnuplot

General purpose pipe-oriented plotting tool

nixos-unstable 1.61
- nixpkgs-unstable 1.61
- nixos-unstable-small 1.61

pkgs.gnuplot_aquaterm

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixpkgs-unstable 6.0.1
- nixos-unstable-small 6.0.1

pkgs.emacsPackages.gnuplot

None

nixos-unstable 20240914.1522
- nixpkgs-unstable 20240914.1522
- nixos-unstable-small 20240914.1522

pkgs.haskellPackages.gnuplot

2D and 3D plots using gnuplot

nixos-unstable 0.5.7
- nixpkgs-unstable 0.5.7
- nixos-unstable-small 0.5.7

pkgs.emacsPackages.gnuplot-mode

None

nixos-unstable 20171013.1616
- nixpkgs-unstable 20171013.1616
- nixos-unstable-small 20171013.1616

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

A simple interface to Gnuplot

nixos-unstable 0.4.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@mnacamura Mitsuhiro Nakamura <m.nacamura@gmail.com>
@lovek323 Jason O'Conal <jason@oconal.id.au>
@thielema Henning Thielemann <nix@henning-thielemann.de>

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.gnuplot

pkgs.gnuplot_qt

pkgs.feedgnuplot

pkgs.gnuplot_aquaterm

pkgs.emacsPackages.gnuplot

pkgs.haskellPackages.gnuplot

pkgs.emacsPackages.gnuplot-mode

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.gnuplot

pkgs.gnuplot_qt

pkgs.feedgnuplot

pkgs.gnuplot_aquaterm

pkgs.emacsPackages.gnuplot

pkgs.haskellPackages.gnuplot

pkgs.emacsPackages.gnuplot-mode

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.gnuplot

pkgs.gnuplot_qt

pkgs.feedgnuplot

pkgs.gnuplot_aquaterm

pkgs.emacsPackages.gnuplot

pkgs.haskellPackages.gnuplot

pkgs.emacsPackages.gnuplot-mode

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.gnuplot

pkgs.gnuplot_qt

pkgs.feedgnuplot

pkgs.gnuplot_aquaterm

pkgs.emacsPackages.gnuplot

pkgs.haskellPackages.gnuplot

pkgs.emacsPackages.gnuplot-mode

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.gnuplot

pkgs.gnuplot_qt

pkgs.feedgnuplot

pkgs.gnuplot_aquaterm

pkgs.emacsPackages.gnuplot

pkgs.haskellPackages.gnuplot

pkgs.emacsPackages.gnuplot-mode

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.gnuplot

pkgs.gnuplot_qt

pkgs.feedgnuplot

pkgs.gnuplot_aquaterm

pkgs.emacsPackages.gnuplot

pkgs.haskellPackages.gnuplot

pkgs.emacsPackages.gnuplot-mode

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

Package maintainers

References