mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-06-14 05:49:57 +00:00
Code Issues Projects Releases Wiki Activity
31,053 Commits 64 Branches 0 Tags
scarthgap
Commit Graph

10 Commits

Author SHA1 Message Date
Zhang Peng fddaa45a87 gnuplot: fix CVE-2025-31181 
CVE-2025-31181:
A flaw was found in gnuplot. The X11_graphics() function may lead to a
segmentation fault and cause a system crash.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-31181]

Upstream patches:
[https://sourceforge.net/p/gnuplot/gnuplot-main/ci/af96c2c1b20383684b1ec2084dab7936f7053031/]

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
 2025-09-12 08:15:12 +08:00
Zhang Peng 732f5800cf gnuplot: fix CVE-2025-31180 
CVE-2025-31180:
A flaw was found in gnuplot. The CANVAS_text() function may lead to a
segmentation fault and cause a system crash.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-31180]

Upstream patches:
[https://sourceforge.net/p/gnuplot/gnuplot-main/ci/b2343fd02c4fff94957f0151b73daa0a1f7fec49/]

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
 2025-09-12 08:15:12 +08:00
Zhang Peng 02d046e20d gnuplot: fix CVE-2025-31179 
CVE-2025-31179:
A flaw was found in gnuplot. The xstrftime() function may lead to a
segmentation fault, causing a system crash.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-31179]

Upstream patches:
[https://sourceforge.net/p/gnuplot/gnuplot-main/ci/ed647df512786b3c94429dd5c864715301e03ea5/]

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
 2025-09-12 08:15:12 +08:00
Zhang Peng 3d810d7d3b gnuplot: fix CVE-2025-31178 
CVE-2025-31178:
A flaw was found in gnuplot. The GetAnnotateString() function may lead to a
segmentation fault and cause a system crash.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-31178]

Upstream patches:
[https://sourceforge.net/p/gnuplot/gnuplot-main/ci/b78cc829a18e9436daaa859c96f3970157f3171e/]

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
 2025-09-12 08:15:12 +08:00
Zhang Peng dd4b10de44 gnuplot: fix CVE-2025-31177 
CVE-2025-31177:
gnuplot is affected by a heap buffer overflow at function utf8_copy_one.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-31177]

Upstream patches:
[https://sourceforge.net/p/gnuplot/gnuplot-main/ci/226809aebb345e74d371bb43a2b434b490be527a/]

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
 2025-09-12 08:15:12 +08:00
Zhang Peng a3826c4999 gnuplot: fix CVE-2025-31176 
CVE-2025-31176:
A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation
fault and cause a system crash.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-31176]

Upstream patches:
[https://sourceforge.net/p/gnuplot/gnuplot-main/ci/b456a3ef618f55a20b3071d336cb20514274f1d4/]

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
 2025-09-12 08:15:12 +08:00
Zhang Peng 9d3537ef42 gnuplot: fix CVE-2025-3359 
CVE-2025-3359:
A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal
may jeopardize the environment.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2025-3359]

Upstream patches:
[https://sourceforge.net/p/gnuplot/gnuplot-main/ci/a5897feadc4be73b0ffd8458556c47117bd24d03/]

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
 2025-09-12 08:15:12 +08:00
Preeti Sachan 0bb3d4b6a0 gnuplot: inherit pkgconfig 
Inherited pkgconfig to fix pngcairo terminal compilation enabled
by default with pkgconfig option PACKAGECONFIG[cairo]

Signed-off-by: Preeti Sachan <preeti.sachan@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
 2022-04-19 09:45:38 -07:00
Khem Raj 150581b637 gnuplot: Disable libcerf and fix typo 
We do not carry recipe for libcerf, so disable it explicitly so the
native builds are also a bit more deterministic.

Fix a typo in knob to disable wxwidgets

Signed-off-by: Khem Raj <raj.khem@gmail.com>
 2022-04-10 10:05:35 -07:00
Wang Mingyu 2d41a2195a gnuplot: upgrade 5.4.2 -> 5.4.3 
Changelog:
=========
NEW "set pm3d border retrace" will use quadrangle color for the border
NEW "nogrid" flag for plots to opt out of dgrid3d processing
NEW option "above|below y=<val>" for "plot with fillsteps"
NEW "set style histogram nokeyseparators" suppress blank key entries Bug #2473
CHANGE always allow palette color for non-plot elements of 2D plot
FIX contours were incorrectly allocated space in the key even if "notitle"
FIX evaluation of unary minus in front of ternary operator Bug #2468
FIX arm and s390 require "signed char" Bugs #2467 #2450
FIX range errors if "smooth csplines" applied with x-axis reversed Bug #2465
FIX handle various corner cases found by fuzzing
FIX textcolor should accept "linetype N" Bug #2459
FIX Windows: handling of Window messages for piped input Bugs #2204 #2412
FIX aquaterm: auto-configuration use of Frameworks Bug #2419
FIX qt: pm3d quadrangle borders for transparent surfaces
FIX png/gif: gdlib auto-configuration issues
FIX dumb: limit enhanced text markup to single-line vertical displacement

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
 2022-02-22 08:30:51 -08:00