"Gary E. Miller" <[email protected]> writes: > Nothing changed to require new API, ABI or shared library > versions > > The news file:: > > 3.27.1: 17-Dec-2025 > Fixes for two CVE. Parsing failures on malicious packets. > CVE-2025-67268 - Heap-based Out-of-bounds Write, NMEA2000 > CVE-2025-67269 - Integer Underflow, NovAtel > Some ubxtool updates.
Also a new file share/doc/gpsd/SECURITY.md is installed. It looks like 3.27.1 also includes a fair bit of gardening, but I don't see anything concerning. f1e3eb799 SConscript: Start version 3.27.1~dev. Fix nongnu.org upload. c5e3259a2 man/gpsrinex.adoc: Fix obs filename. f6f108867 www/gpscap.ini: Add NEO-M9N, update many URLs. 21236c0ac clients/gpsprof.py.in: u-blox HPG claims 0.1 mm resolution. b60dfd5ff www/gpscap.ini: Remove more dead links. 611f730d4 SECURITY.md: Add this month;s new toy: SECURITY.md d174ee64f SUPPORT.adoc: Minor updates. Specify LiberaChat IRC. f71a58bb9 www/gpscap.ini: Remove dead links. Mark discontinued products. dc966aa74 drivers/driver_nmea2000.c: Fix issue 356, skyview buffer overrun. d3e03bb52 android/README: Make clear android/ is not part of any gpsd release. e22d2593a android/gpsd_wrapper.c: Point out many bad problems in this file. ffa1d6f40 gpsd/packet.c: Fix integer underflow is malicious Navcom packet 080681770 udev, scons: Fix SYSTEMD_WANTS add & remove with += / -= 490e0865b gpsd/packet.c: Fix a logic hole in previous commit. c66979e42 www/gpscap.ini: Rm dead links. Add ZED-F9P ae006c7cc www/faq.html.in: Fix 2 dead links 52d3bab51 www/references.html: Remove dead links. Note WAAS is secret. 7a4848435 www/ubxtool-examples.adoc: expand upon the MON-SPAn example. 7e536662c man/gpsprof.adoc: gnuplot changed -persist to --persist, Use -p. cbd96e690 gps/ubx.py: Add UBX message types. 0c98955dc gps/ubx.py: Add several -able and poll message type. 9d477e544 www/gpscap.py.in: Fix typo from 2009. 2c6b42b88 gps/ubx.py: Add send_able for UBX-NAV2 messages. af42bc153 (tag: release-3.27.1) 3.27.1 Release. Fix 2 CVE. > git diff --stat release-3.27..release-3.27.1 NEWS | 6 +++++ SConscript | 8 +++++- SConstruct | 2 +- SECURITY.md | 5 ++++ SUPPORT.adoc | 16 ++++++------ android/README | 7 +++++ android/gpsd_wrapper.c | 22 +++++++++++++--- clients/gpsprof.py.in | 48 +++++++++++++++++----------------- drivers/driver_nmea2000.c | 123 +++++++++++++++++++++++++++++++++++++++++++++++++------------------------------------- gps/ubx.py | 118 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++----- gpsd.rules.in | 6 ++--- gpsd/packet.c | 65 ++++++++++++++++++++++++++++++++++------------ man/gpsprof.adoc | 4 +-- man/gpsrinex.adoc | 2 +- www/faq.html.in | 2 +- www/gpscap.ini | 275 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++--------------------------------------------------------------------------------- www/gpscap.py.in | 2 +- www/index.html.in | 8 ------ www/references.html | 15 ++++++----- www/ubxtool-examples.adoc | 27 ++++++++++++++++--- www/upstream-bugs.html | 15 ++--------- 21 files changed, 508 insertions(+), 268 deletions(-)
