Your message dated Tue, 06 Oct 2026 08:49:47 +0000
with message-id <[email protected]>
and subject line Bug#1148471: fixed in osmo-iuh 1.8.1+dfsg1-2
has caused the Debian Bug report #1148471,
regarding osmo-iuh: CVE-2026-75894
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1148471: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1148471
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: osmo-iuh
X-Debbugs-CC: [email protected]
Severity: important
Tags: security
Hi,
The following vulnerability was published for osmo-iuh.
CVE-2026-75894[0]:
| In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found
| in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU
| that leads to process crash and remote denial of service.
https://cgit.osmocom.org/osmo-iuh/commit/?id=f06967126f486bcb185ccf3d1a8f9bc02c4da1f6
(1.8.1)
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2026-75894
https://www.cve.org/CVERecord?id=CVE-2026-75894
Please adjust the affected versions in the BTS as needed.
--- End Message ---
--- Begin Message ---
Source: osmo-iuh
Source-Version: 1.8.1+dfsg1-2
Done: Thorsten Alteholz <[email protected]>
We believe that the bug you reported is fixed in the latest version of
osmo-iuh, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Thorsten Alteholz <[email protected]> (supplier of updated osmo-iuh package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 06 Oct 2026 09:41:12 +0200
Source: osmo-iuh
Architecture: source
Version: 1.8.1+dfsg1-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Mobcom Maintainers
<[email protected]>
Changed-By: Thorsten Alteholz <[email protected]>
Closes: 1148471
Changes:
osmo-iuh (1.8.1+dfsg1-2) unstable; urgency=medium
.
* upload to unstable (Closes: #1148471)
Checksums-Sha1:
5600a0c07f62c869657c0fe7790c5a6b15dc9245 2998 osmo-iuh_1.8.1+dfsg1-2.dsc
3527719ab83dc3b905d1592fcbb82a0b57780513 1292884
osmo-iuh_1.8.1+dfsg1.orig.tar.xz
629b71dc82c9790cfcf761297ed9d6e2550602d7 21920
osmo-iuh_1.8.1+dfsg1-2.debian.tar.xz
0f5c2fffba4fd2df0dc9994f7cb2aeed91e43788 11014
osmo-iuh_1.8.1+dfsg1-2_amd64.buildinfo
Checksums-Sha256:
6b007df2de949bbffcaf329fbdfc19ff9f8c9c90a77415847534bcc6639e4df0 2998
osmo-iuh_1.8.1+dfsg1-2.dsc
f4c1cd97f5d7e32d851219b080f38cc1c7c83e948cfbf2cfe635726245b70742 1292884
osmo-iuh_1.8.1+dfsg1.orig.tar.xz
7652e15378ae86c4a4c93fc4db0cd443e31d1b10ccddc132ae2738a6fd6695e8 21920
osmo-iuh_1.8.1+dfsg1-2.debian.tar.xz
8f013db566e7f1fc77ef7dd641853afd3f923c2860587d399bc600edd2c23b10 11014
osmo-iuh_1.8.1+dfsg1-2_amd64.buildinfo
Files:
d0f6b7279f0a1e14650b3e671397c063 2998 libs optional osmo-iuh_1.8.1+dfsg1-2.dsc
e02663ececb8fd47ceea36c1163f0785 1292884 libs optional
osmo-iuh_1.8.1+dfsg1.orig.tar.xz
53bccc1b5cc7707485b54f0399d97b50 21920 libs optional
osmo-iuh_1.8.1+dfsg1-2.debian.tar.xz
67656d6954d348624f84f7fc53560c64 11014 libs optional
osmo-iuh_1.8.1+dfsg1-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=SE6t
-----END PGP SIGNATURE-----
pgpPwHsav5O8f.pgp
Description: PGP signature
--- End Message ---
