Skip to content
OpenAdvisories
High ELSA-2026-0770 2 CVEs

Important: gpsd security update (Oracle Linux 10)

Published Jan 19, 2026 · Updated Jan 19, 2026

Ecosystem: Oracle Linux

Summary

[1:3.26.1-1.0.1.el10_1.1]
- Replace upstream reference [Orabug: 37033219]

[1:3.26.1-1.el10_1.1]
- fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
- fix integer underflow in handling of Navcom packets (CVE-2025-67269)

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 10 gpsd 1:3.26.1-1.0.1.el10_1.1
Oracle Linux · 10 gpsd-clients 1:3.26.1-1.0.1.el10_1.1
Oracle Linux · 10 python3-gpsd 1:3.26.1-1.0.1.el10_1.1

Vulnerabilities 2

  • Critical 9.8
    CVE-2025-67268

    gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c fil…

    gpsd gpsd Debian Ubuntu
  • High 7.5
    CVE-2025-67269

    An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to co…

    gpsd gpsd Debian Ubuntu