[CLSA-2026:1789034846] gpsd-minimal: Fix of CVE-2026-60122
Type:
security
Severity:
Important
Release date:
2026-09-10 10:07:37 UTC
Description:
- CVE-2026-60122: force the SKY satellite used flag to boolean in the gpsprof spaceplot and polarplot samplers to prevent command injection through the generated gnuplot data block
CVEs fixed:
Updated packages:
  • gpsd-minimal-3.25-4.el9_6.2.tuxcare.els3.x86_64.rpm
    sha:e929b278a5d8a234f2081a6250f036baf3db8e8f13331a6e806b1964bb8f2eb0
  • gpsd-minimal-clients-3.25-4.el9_6.2.tuxcare.els3.x86_64.rpm
    sha:06ffd3633db531f87d7a773300867aded67bfb006d98932c4ffa957015958a40
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.