Skip to content
OpenAdvisories
High RHSA-2026:51153 1 CVE

Red Hat Security Advisory: gpsd-minimal security update

Published Aug 7, 2026 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream gpsd-minimal 1:3.26.1-2.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::appstream gpsd-minimal-clients 1:3.26.1-2.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::appstream gpsd-minimal-clients-debuginfo 1:3.26.1-2.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::appstream gpsd-minimal-debuginfo 1:3.26.1-2.el9_8.1
Red Hat · RHEL 9 enterprise_linux:9::appstream gpsd-minimal-debugsource 1:3.26.1-2.el9_8.1

Vulnerabilities 1

  • High 7.8
    CVE-2026-58459

    gpsd gpsprof Command Injection via gnuplot plot title subtype field

    gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot t…

    NTPsec gpsd gpsd gpsd Debian Ubuntu Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2498575
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51153.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-58459
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-58459
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-58459
  • article
    https://github.com/ntpsec/gpsd/commit/1a6bb7bcbdf58aa940132e630870af061dc88537
  • article
    https://github.com/ntpsec/gpsd/commit/4c06658e988f4ced1a7a574ce082a22ef625df56
  • article
    https://github.com/ntpsec/gpsd/commit/5581ba196d826a984fbfaf792b7d58535f9911ce
  • article
    https://gitlab.com/gpsd/gpsd/-/work_items/404#note_3534119267
  • article
    https://www.vulncheck.com/advisories/gpsd-gpsprof-command-injection-via-gnuplot-plot-title-subtype-field