Red Hat Security Advisory

RHSA-2026:51075

gpsd security update

Released 2026-08-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) gpsd-1:3.26.1-3.el10_2.1, gpsd-clients-1:3.26.1-3.el10_2.1, python3-gpsd-1:3.26.1-3.el10_2.1

Fixes 1 record

TI-2026-42067 CVE-2026-58459 · GHSA-2hhc-4hqc-4mg8

gpsd gpsprof Command Injection via gnuplot plot title subtype field

MEDIUM 44

gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.02862 Published 2026-07-09 Fixed CWE-78