Red Hat Security Advisory

RHSA-2026:65162

gpsd security update

Released 2026-09-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) gpsd-1:3.26.1-3.el10_2.2, gpsd-clients-1:3.26.1-3.el10_2.2, python3-gpsd-1:3.26.1-3.el10_2.2

Fixes 1 record

TI-2026-42839 CVE-2026-60122 · GHSA-9m96-crvq-5qcj

gpsd gpsprof Code Injection via SKY.satellites used Field

LOW 38

gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacker who controls GPS input data to execute arbitrary OS commands by injecting malic…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00265 Published 2026-07-23 Fixed CWE-94