Your message dated Thu, 15 Oct 2026 07:20:04 +0000
with message-id <[email protected]>
and subject line Bug#1148556: fixed in osmo-bsc 1.15.0-1
has caused the Debian Bug report #1148556,
regarding osmo-bsc: CVE-2026-75893
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1148556: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1148556
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: osmo-bsc
X-Debbugs-CC: [email protected]
Severity: important
Tags: security
Hi,
The following vulnerability was published for osmo-bsc.
CVE-2026-75893[0]:
| In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow
| issue was found in the ipaccess_proxy_read_msg() function via IPA
| frame lengths.
Fixed by:
https://cgit.osmocom.org/osmo-bsc/commit/?id=2852a03c153cd9418c2a86d0b2193ac41169dbb7
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2026-75893
https://www.cve.org/CVERecord?id=CVE-2026-75893
Please adjust the affected versions in the BTS as needed.
--- End Message ---
--- Begin Message ---
Source: osmo-bsc
Source-Version: 1.15.0-1
Done: Thorsten Alteholz <[email protected]>
We believe that the bug you reported is fixed in the latest version of
osmo-bsc, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Thorsten Alteholz <[email protected]> (supplier of updated osmo-bsc package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 10 Oct 2026 10:26:16 +0200
Source: osmo-bsc
Architecture: source
Version: 1.15.0-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Mobcom Maintainers
<[email protected]>
Changed-By: Thorsten Alteholz <[email protected]>
Closes: 1148556
Changes:
osmo-bsc (1.15.0-1) experimental; urgency=medium
.
* New upstream release. (Closes: #1148556)
* upload to experimental
Checksums-Sha1:
51b1f94cee3fee1bd74d939c2498a78648752ce0 2689 osmo-bsc_1.15.0-1.dsc
2bb3261d100d6a09456581b228559a4795433c5e 531904 osmo-bsc_1.15.0.orig.tar.xz
27f958b73ecbb1fe17c3092f9a743809d76b1d98 10840 osmo-bsc_1.15.0-1.debian.tar.xz
19202e94c987a1532ba3151a65408da25dfd363a 10362
osmo-bsc_1.15.0-1_amd64.buildinfo
Checksums-Sha256:
6e97d3cb5101cf0f1f4bcfad838cb6233bed35ece95c0ce7c00b8896ce60dc7a 2689
osmo-bsc_1.15.0-1.dsc
f859493201cdff49f3df7cad7f73dae69ae8bb3e5001121a20f47dff1b37f066 531904
osmo-bsc_1.15.0.orig.tar.xz
e267658b4eb3cd6a674a7fa6bd9244c8dc93fca4e747fe0f3428c01ba677f096 10840
osmo-bsc_1.15.0-1.debian.tar.xz
7fe349b6ca0de8047839b5aa30913ac29b8f52ea47e1e5817e728dde92c0187c 10362
osmo-bsc_1.15.0-1_amd64.buildinfo
Files:
536c1c1147b51466626ececeec0fdfe1 2689 net optional osmo-bsc_1.15.0-1.dsc
cd730f7b4fe3581a48ff0781ae933ebd 531904 net optional
osmo-bsc_1.15.0.orig.tar.xz
ba5e30509a473bce39455cf2712ffd00 10840 net optional
osmo-bsc_1.15.0-1.debian.tar.xz
4cbbb9ac62ef64566ff7ab9ea5336418 10362 net optional
osmo-bsc_1.15.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=r0c0
-----END PGP SIGNATURE-----
pgpNcwIh78CrY.pgp
Description: PGP signature
--- End Message ---
