Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Fedora 44 gpsd Command Injection Vulnerability Resolution 2026-36e3aa0593

fedora
Calendar Grey July 20, 2026
Scroller Fedora
Critical security fix for gpsd addresses command injection risks. Upgrade recommended for Fedora 44 users.
Security fix for CVE-2026-58459

Summary

gpsd is a service daemon that mediates access to a GPS sensor

connected to the host computer by serial or USB interface, making its

data on the location/course/velocity of the sensor available to be

queried on TCP port 2947 of the host computer. With gpsd, multiple

GPS client applications (such as navigational and war-driving software)

can share access to a GPS without contention or loss of data. Also,

gpsd responds to queries with a format that is substantially easier to

parse than NMEA 0183.

Update Information:

Security fix for CVE-2026-58459

Topics%20covered

Topics Covered

security advisory fedora arbitrary code execution important command injection gpsd

Change Log

* Mon Jul 13 2026 Miroslav Lichvar - 1:3.27.5-5 - fix command injection in gpsprof (CVE-2026-58459) * Wed Jun 3 2026 Python Maint - 1:3.27.5-4 - Rebuilt for Python 3.15

References


[ 1 ] Bug #2498940 - CVE-2026-58459 gpsd: gpsd: Command Injection via GPS device subtype allows arbitrary code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2498940

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-36e3aa0593' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: gpsd
Product: Fedora 44
Version: 3.27.5
Release: 5.fc44
URL: https://gpsd.gitlab.io/gpsd/index.html
Summary: Service daemon for mediating access to a GPS

Topics%20covered

Topics Covered

security advisory fedora arbitrary code execution important command injection gpsd

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.