Important: Red Hat Security Advisory: gpsd-minimal security update

An update for gpsd-minimal is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

gpsd security update

3.26.1-3.0.1.el102.1 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.1 - fix command injection in gpsprof CVE-2026-58459...

RHEL 9 : gpsd-minimal (RHSA-2026:51153)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51153 advisory. gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the...

Fedora 44 : gpsd (2026-36e3aa0593)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-36e3aa0593 advisory. Security fix for CVE-2026-58459 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

gpsd-3.27.5-3.1 on GA media (moderate)

gpsd-3.27.5-3.1 on GA media Announcement ID: openSUSE-SU-2026:11276-1 Rating: moderate Cross-References: CVE-2026-58459 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the gpsd-3.27.5-3.1...

CVE-2026-58459

creationtimestamp| type| source ---|---|--- 2026-07-09 19:04:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqadagsstr26 2026-07-13 18:29:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkd43obcc2x 2026-07-14 21:37:07+00:00| seen|...

CVE-2026-58459

gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot title without proper escaping. The...

CVE-2026-58459

gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot title without proper escaping. The...