Skip to content
OpenAdvisories
High ELSA-2026-0771 2 CVEs

Important: gpsd-minimal security update (Oracle Linux 9)

Published Jan 19, 2026 · Updated Jan 19, 2026

Summary

[1:3.26.1-1.0.1.el9_7.1]
- Replaced upstream reference [Orabug: 35865525]

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 gpsd-minimal 1:3.26.1-1.0.1.el9_7.1
Oracle Linux · 9 gpsd-minimal-clients 1:3.26.1-1.0.1.el9_7.1

Vulnerabilities 2

  • Critical 9.8

    gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c fil…

  • High 7.5

    An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to co…