Security update for gnuplot SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:1660-1 Final 1 1 2020-06-18T09:10:01Z current 2020-06-18T09:10:01Z 2020-06-18T09:10:01Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gnuplot This update for gnuplot fixes the following issues: Following security issues were fixed: - CVE-2018-19492: Fixed a buffer overflow in cairotrm_options function (bsc#1117463) - CVE-2018-19491: Fixed a buffer overlow in the PS_options function (bsc#1117464) - CVE-2018-19490: Fixed a heap-based buffer overflow in the df_generate_ascii_array_entry function (bsc#1117465) - CVE-2017-9670: Fixed a uninitialized stack variable vulnerability which could lead to a Denial of Service (bsc#1044638) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2020-1660,SUSE-SLE-SERVER-12-SP4-2020-1660,SUSE-SLE-SERVER-12-SP5-2020-1660 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20201660-1/ Link for SUSE-SU-2020:1660-1 https://lists.suse.com/pipermail/sle-security-updates/2020-June/006967.html E-Mail link for SUSE-SU-2020:1660-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1044638 SUSE Bug 1044638 https://bugzilla.suse.com/1117463 SUSE Bug 1117463 https://bugzilla.suse.com/1117464 SUSE Bug 1117464 https://bugzilla.suse.com/1117465 SUSE Bug 1117465 https://www.suse.com/security/cve/CVE-2017-9670/ SUSE CVE CVE-2017-9670 page https://www.suse.com/security/cve/CVE-2018-19490/ SUSE CVE CVE-2018-19490 page https://www.suse.com/security/cve/CVE-2018-19491/ SUSE CVE CVE-2018-19491 page https://www.suse.com/security/cve/CVE-2018-19492/ SUSE CVE CVE-2018-19492 page SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 gnuplot-4.6.5-3.3.74 gnuplot-doc-4.6.5-3.3.74 gnuplot-4.6.5-3.3.74 as a component of SUSE Linux Enterprise Server 12 SP4 gnuplot-4.6.5-3.3.74 as a component of SUSE Linux Enterprise Server 12 SP5 gnuplot-4.6.5-3.3.74 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 gnuplot-4.6.5-3.3.74 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact when a victim opens a specially crafted file. CVE-2017-9670 SUSE Linux Enterprise Server 12 SP4:gnuplot-4.6.5-3.3.74 SUSE Linux Enterprise Server 12 SP5:gnuplot-4.6.5-3.3.74 SUSE Linux Enterprise Server for SAP Applications 12 SP4:gnuplot-4.6.5-3.3.74 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gnuplot-4.6.5-3.3.74 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201660-1/ https://www.suse.com/security/cve/CVE-2017-9670.html CVE-2017-9670 https://bugzilla.suse.com/1044638 SUSE Bug 1044638 An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in df_generate_ascii_array_entry. To exploit this vulnerability, an attacker must pass an overlong string as the right bound of the range argument that is passed to the plot function. CVE-2018-19490 SUSE Linux Enterprise Server 12 SP4:gnuplot-4.6.5-3.3.74 SUSE Linux Enterprise Server 12 SP5:gnuplot-4.6.5-3.3.74 SUSE Linux Enterprise Server for SAP Applications 12 SP4:gnuplot-4.6.5-3.3.74 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gnuplot-4.6.5-3.3.74 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201660-1/ https://www.suse.com/security/cve/CVE-2018-19490.html CVE-2018-19490 https://bugzilla.suse.com/1117465 SUSE Bug 1117465 An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PS_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot postscript terminal is used as a backend. CVE-2018-19491 SUSE Linux Enterprise Server 12 SP4:gnuplot-4.6.5-3.3.74 SUSE Linux Enterprise Server 12 SP5:gnuplot-4.6.5-3.3.74 SUSE Linux Enterprise Server for SAP Applications 12 SP4:gnuplot-4.6.5-3.3.74 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gnuplot-4.6.5-3.3.74 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201660-1/ https://www.suse.com/security/cve/CVE-2018-19491.html CVE-2018-19491 https://bugzilla.suse.com/1117464 SUSE Bug 1117464 An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairotrm_options function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the Gnuplot pngcairo terminal is used as a backend. CVE-2018-19492 SUSE Linux Enterprise Server 12 SP4:gnuplot-4.6.5-3.3.74 SUSE Linux Enterprise Server 12 SP5:gnuplot-4.6.5-3.3.74 SUSE Linux Enterprise Server for SAP Applications 12 SP4:gnuplot-4.6.5-3.3.74 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gnuplot-4.6.5-3.3.74 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201660-1/ https://www.suse.com/security/cve/CVE-2018-19492.html CVE-2018-19492 https://bugzilla.suse.com/1117463 SUSE Bug 1117463