Skip to content
OpenAdvisories
High ELSA-2026-51075 1 CVE

Important: gpsd security update (Oracle Linux 10)

Published Aug 6, 2026 · Updated Aug 6, 2026

Ecosystem: Oracle Linux

Summary

[3.26.1-3.0.1.el10_2.1]
- Replace upstream reference [Orabug: 37033219]

[1:3.26.1-3.el10_2.1]
- fix command injection in gpsprof (CVE-2026-58459)

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 10 gpsd 1:3.26.1-3.0.1.el10_2.1
Oracle Linux · 10 gpsd-clients 1:3.26.1-3.0.1.el10_2.1
Oracle Linux · 10 python3-gpsd 1:3.26.1-3.0.1.el10_2.1

Vulnerabilities 1

  • High 7.8
    CVE-2026-58459

    gpsd gpsprof Command Injection via gnuplot plot title subtype field

    gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot t…

    NTPsec gpsd gpsd gpsd Debian Ubuntu Wolfi