ELSA-2026-51153

ELSA-2026-51153 - gpsd-minimal security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-08-07

Description

[3.26.1-2.0.1.el9_8.1]
- Replaced upstream reference [Orabug: 35865525]

[1:3.26.1-2.el9_8.1]
- fix command injection in gpsprof (CVE-2026-58459)

[1:3.26.1-2]
- fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
- fix integer underflow in handling of Navcom packets (CVE-2025-67269)

Related CVEs

CVE-2026-58459

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	gpsd-minimal-3.26.1-2.0.1.el9_8.1.src.rpm	583238c6f4144885dcb598caaab43d4378c266146b837147067a2e71979a279b	-	ol9_aarch64_appstream
	gpsd-minimal-3.26.1-2.0.1.el9_8.1.aarch64.rpm	8d1052866a62c41a7e50af6d53961ea7feec76477fed47ae860d581c41337538	-	ol9_aarch64_appstream
	gpsd-minimal-clients-3.26.1-2.0.1.el9_8.1.aarch64.rpm	994f03b0e2549a365bc3c79bcde83ae878fca927b9816e2c51620325a1481bf9	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	gpsd-minimal-3.26.1-2.0.1.el9_8.1.src.rpm	583238c6f4144885dcb598caaab43d4378c266146b837147067a2e71979a279b	-	ol9_x86_64_appstream
	gpsd-minimal-3.26.1-2.0.1.el9_8.1.x86_64.rpm	34b80544da6995eea6b4aae876c49a0db6a9839f7219c907ad9dc53606940927	-	ol9_x86_64_appstream
	gpsd-minimal-clients-3.26.1-2.0.1.el9_8.1.x86_64.rpm	25c10049a7e82504079ac3e364429a2e72f189c2a4729b4fd5623102aa5806d7	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team