public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Troy Dawson <tdawson@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/gpsd-epel] epel10.2: fix command injection in gpsprof (CVE-2026-58459)
Date: Mon, 17 Aug 2026 19:57:30 GMT	[thread overview]
Message-ID: <178699665037.1.9506471935105725862.rpms-gpsd-epel-e65ef732611f@fedoraproject.org> (raw)

A new commit has been pushed.

Repo   : rpms/gpsd-epel
Branch : epel10.2
Commit : e65ef732611f9339d9239afdda5f0291af6b7093
Author : Troy Dawson <tdawson@redhat.com>
Date   : 2026-08-17T12:57:21-07:00
Stats  : +6/-3 in 1 file(s)
URL    : https://src.fedoraproject.org/rpms/gpsd-epel/c/e65ef732611f9339d9239afdda5f0291af6b7093?branch=epel10.2

Log:
fix command injection in gpsprof (CVE-2026-58459)

---
diff --git a/gpsd-epel.spec b/gpsd-epel.spec
index 86e76b5..40178a0 100644
--- a/gpsd-epel.spec
+++ b/gpsd-epel.spec
@@ -1,5 +1,5 @@
-# This spec file is derived from the EPEL9 gpsd spec file.
-# Updates come from the CentOS Stream 10 gpsd sgit repo
+# This spec file is derived from the EPEL10 gpsd spec file.
+# Updates come from the Alma Linux 10 and CentOS Stream 10 gpsd git repo
 %global rhel_name gpsd
 
 %global with_libs 1
@@ -12,7 +12,7 @@
 
 Name:           gpsd-epel
 Version:        3.26.1
-Release:        3%{?dist}
+Release:        3%{?dist}.1
 Epoch:          1
 Summary:        Service daemon for mediating access to a GPS
 
@@ -256,6 +256,9 @@ rm -rf %{buildroot}%{python3_sitearch}/gps*
 
 
 %changelog
+* Mon Aug 10 2026 Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-3.1
+- fix command injection in gpsprof (CVE-2026-58459)
+
 * Mon Jan 26 2026 Troy Dawson <tdawson@redhat.com> - 1:3.26.1-3
 - Match RHEL 10 version-release
 - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)

             reply	other threads:[~2026-08-17 19:57 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-08-17 19:57 Troy Dawson [this message]
2026-09-21 14:38 [rpms/gpsd-epel] epel10.2: fix command injection in gpsprof (CVE-2026-58459) Troy Dawson

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178699665037.1.9506471935105725862.rpms-gpsd-epel-e65ef732611f@fedoraproject.org \
    --to=tdawson@redhat.com \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox