MGASA-2026-0454
- Source
- https://advisories.mageia.org/MGASA-2026-0454.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0454.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2026-0454
- Upstream
- Published
- 2026-09-25T16:24:58Z
- Modified
- 2026-09-25T16:30:03Z
- Summary
- Updated gpsd packages fix a security vulnerability
- Details
-
Command Injection via gnuplot plot title subtype field. (CVE-2026-58459)
- References
-
- https://advisories.mageia.org/MGASA-2026-0454.html
- https://bugs.mageia.org/show_bug.cgi?id=35953
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/AQ2ORFQ66FNIA3MWLLYYOG4BV4FARQUN/
- https://gitlab.com/gpsd/gpsd/-/work_items/404#note_3534119267
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFEVG42PGVGT7U55DLZYEB2HKIVYGMPM/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:10 / gpsd
Package
- Name
- gpsd
- Purl
- pkg:rpm/mageia/gpsd?arch=source&distro=mageia-10
Mageia:9 / gpsd
Package
- Name
- gpsd
- Purl
- pkg:rpm/mageia/gpsd?arch=source&distro=mageia-9