| Release | Version |
|---|---|
| bullseye | 1.4.1-1 |
| bookworm | 1.6.2-2 |
| trixie | 2.0.1-1 |
| sid | 2.0.1-1 |
| Bug | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|
| CVE-2025-47815 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a h ... |
| CVE-2025-47814 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a h ... |
| CVE-2022-39832 | vulnerable (no DSA) | fixed | fixed | fixed | An issue was discovered in PSPP 1.6.2. There is a heap-based buffer ov ... |
| CVE-2022-39831 | vulnerable (no DSA) | fixed | fixed | fixed | An issue was discovered in PSPP 1.6.2. There is a heap-based buffer ov ... |
| Bug | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|
| CVE-2025-48188 | vulnerable | vulnerable | vulnerable | vulnerable | libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fi ... |
| CVE-2025-47816 | vulnerable | vulnerable | vulnerable | vulnerable | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an ... |
| CVE-2025-47229 | vulnerable | vulnerable | vulnerable | vulnerable | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a d ... |
| CVE-2025-5001 | vulnerable | vulnerable | vulnerable | vulnerable | A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108 ... |
| Bug | Description |
|---|---|
| CVE-2019-9211 | There is a reachable assertion abort in the function write_long_string ... |
| CVE-2018-20230 | An issue was discovered in PSPP 1.2.0. There is a heap-based buffer ov ... |
| CVE-2017-12961 | There is an assertion abort in the function parse_attributes() in data ... |
| CVE-2017-12960 | There is a reachable assertion abort in the function dict_rename_var() ... |
| CVE-2017-12959 | There is a reachable assertion abort in the function dict_add_mrset() ... |
| CVE-2017-12958 | There is an illegal address access in the function output_hex() in dat ... |
| CVE-2017-10792 | There is a NULL Pointer Dereference in the function ll_insert() of the ... |
| CVE-2017-10791 | There is an Integer overflow in the hash_int function of the libpspp l ... |