Description
gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | gps | 0.9.4-1woody1 | DSA-307 |
Advisories 1
- DSA-307 gps - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-307 vendor-advisory
- http://gps.seul.org/changelog.html