Ubuntu has issued an advisory on September 25: https://ubuntu.com/security/notices/USN-4541-1 I believe the issues were fixed upstream in 5.2.6.
Thanks reporting this. As there is no registered packager, assigning to all. CC'ed recent committer. (Packagers: Please change status to "Assigned" when you are working on this.)
Assignee: bugsquad => pkg-bugsCC: (none) => joequant, joequant, ouaurelien
Hi, Those CVEs are already fixed in gnuplot-5.2.2-5.mga7 (see bug 24754). Best regards, Nico.
CC: (none) => nicolas.salgueroStatus: NEW => RESOLVEDResolution: (none) => FIXED
Thanks. *** This bug has been marked as a duplicate of bug 24754 ***
Resolution: FIXED => DUPLICATE