The following vulnerability was published for pspp.
CVE-2025-5001[0]:
| A vulnerability was found in GNU PSPP
| 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as
| problematic. This vulnerability affects the function calloc of the
| file pspp-convert.c. The manipulation of the argument -l leads to
| integer overflow. Local access is required to approach this attack.
| The exploit has been disclosed to the public and may be used.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.