-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 25 Jul 2026 21:40:31 +0000
Source: gpsd
Architecture: source
Version: 3.25-5+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: Boian Bonev <bbonev@ipacct.com>
Changed-By: Boian Bonev <bbonev@ipacct.com>
Changes:
 gpsd (3.25-5+deb13u2) trixie; urgency=medium
 .
   * Fix CVE-2026-58459 (see #1141962). A command injection vulnerability
     exists in the gpsprof client. The subtype field, sourced from a
     DEVICES JSON log entry or an NMEA PGRMT sentence, is written into
     the generated gnuplot program via a set title statement with only
     double quote characters escaped. An attacker who controls the GPS
     device subtype can embed backtick payloads and execute arbitrary
     shell commands as the user running gnuplot when the generated plot
     is rendered.
   * Fix CVE-2026-60122. A code injection vulnerability exists in the
     gpsprof client. The SKY.satellites[].used field is inserted
     unsanitized into a gnuplot heredoc data block. An attacker who
     controls the GPS input data can supply a used value containing the
     string EOD to terminate the heredoc early and append gnuplot
     system() calls, achieving OS command execution as the user running
     gpsprof when the generated plot script is processed by gnuplot in
     polar mode.
Checksums-Sha1:
 4175824989f0450a6cbeadc7124420c2b135cdfe 3133 gpsd_3.25-5+deb13u2.dsc
 17fcc4516bf01949c81629d010d5ed50031e325b 53692 gpsd_3.25-5+deb13u2.debian.tar.xz
 e98dab2f7d91e803299e14b726d78fd0ee68ae6b 21369 gpsd_3.25-5+deb13u2_amd64.buildinfo
Checksums-Sha256:
 cdc5d63ddcb4fb495b8669f2e9cb50b372cd34250eb6e4672ca8b9eac340cc27 3133 gpsd_3.25-5+deb13u2.dsc
 6ba3944b495ffe9c7dbc70d10fa0eb62a7e522cdc46251c54e11e558e4d9a059 53692 gpsd_3.25-5+deb13u2.debian.tar.xz
 6439b00006b718ea46de1feaf018247a1f909a2419782b319085e50b9e0052be 21369 gpsd_3.25-5+deb13u2_amd64.buildinfo
Files:
 311fcb29479b338e7a277cf22fb4c365 3133 misc optional gpsd_3.25-5+deb13u2.dsc
 446f46f404b749874ec4986a9c4ba667 53692 misc optional gpsd_3.25-5+deb13u2.debian.tar.xz
 0937d9006236208dfdb988778c68f379 21369 misc optional gpsd_3.25-5+deb13u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJGBAEBCgAwFiEEumC8IPN+WURNbSUAE2VyCRPS8i0FAmplO8kSHGJib25ldkBp
cGFjY3QuY29tAAoJEBNlcgkT0vItRaYQAJOcqjbk1npzrymFiGOGcJ9y2H3NdcRF
4m0YxI2bag0kmbufliXWZ7IcPj7RsGrXLGOcMa9tmcCC+H2JQ8RnHVcnd9nCmDPc
TnF8EvM1jVDGetgw42qtbGJfH3xPqEDoC90LkPv9UMhmGDEDSApzfS4lyyyveVBf
mbaWdiywfVlIN5Brzod2rdMdO+YWYz176Z2co1JI/1LJwgrIiMAREsr2WdpwGl7J
RQRiIZqiWUzZnkqAF6tCxtby1I6YTNSPtacvc6WNEyJTA4KMXps2eALEBUopbO/B
a6apgmEcyFCaS67hAqO3a47Yhrd3t2fVJHOF13V/qaOyi6BzfmiMcLRNc7hS4O9S
/aSiQ9u4be4rEhehUMROTsxBvVuM1l6EmvqIDYd8Ll1UfcGuKVZajYeukOC36SCk
LTvZyWOkFNn6NBcWuLPzHqEOpXmp9SX5mLlAF8dtrK9tVt4d4RCJ+AdimNHx44gP
WU0FQkt5lFGY2sn4VonmGHp1lZpB3U5viPCMzak134EwmYHeuV3NFkkIucEyIGNh
MYV6v5AxHvC7uMUwhLbz58CrkvQWmrhY0WbBSlgQVJbfC+pz+W1XP8ZJ9qe3G+6l
Mj4Cf5oT8tx4bmgszCeXOIb2fp0SFeRAfKOyNJtZ8zL1Wx9HbCUfvA2AAe9ili/+
s0FoThJZWhwW
=JIIy
-----END PGP SIGNATURE-----