Your message dated Sat, 17 Oct 2026 16:07:27 +0000
with message-id <[email protected]>
and subject line Bug#1148556: fixed in osmo-bsc 1.15.0-2
has caused the Debian Bug report #1148556,
regarding osmo-bsc: CVE-2026-75893
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1148556: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1148556
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: osmo-bsc
X-Debbugs-CC: [email protected]
Severity: important
Tags: security
Hi,
The following vulnerability was published for osmo-bsc.
CVE-2026-75893[0]:
| In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow
| issue was found in the ipaccess_proxy_read_msg() function via IPA
| frame lengths.
Fixed by:
https://cgit.osmocom.org/osmo-bsc/commit/?id=2852a03c153cd9418c2a86d0b2193ac41169dbb7
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2026-75893
https://www.cve.org/CVERecord?id=CVE-2026-75893
Please adjust the affected versions in the BTS as needed.
--- End Message ---
--- Begin Message ---
Source: osmo-bsc
Source-Version: 1.15.0-2
Done: Thorsten Alteholz <[email protected]>
We believe that the bug you reported is fixed in the latest version of
osmo-bsc, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Thorsten Alteholz <[email protected]> (supplier of updated osmo-bsc package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 17 Oct 2026 10:26:16 +0200
Source: osmo-bsc
Architecture: source
Version: 1.15.0-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Mobcom Maintainers
<[email protected]>
Changed-By: Thorsten Alteholz <[email protected]>
Closes: 1148556
Changes:
osmo-bsc (1.15.0-2) unstable; urgency=medium
.
* upload to unstable (Closes: #1148556)
Checksums-Sha1:
5a9432cb6256e9c4b54fb1afb3d45b74c08b8088 2689 osmo-bsc_1.15.0-2.dsc
2bb3261d100d6a09456581b228559a4795433c5e 531904 osmo-bsc_1.15.0.orig.tar.xz
08793735eb40027861677ff94f4d0b3464837012 10836 osmo-bsc_1.15.0-2.debian.tar.xz
a1a248c0454abb9be581bcf750bd89c68a74ba9c 10368
osmo-bsc_1.15.0-2_amd64.buildinfo
Checksums-Sha256:
51c42d71ab7f5f166c096235d09e7abe084c27bd60e9c68541fb698befacb098 2689
osmo-bsc_1.15.0-2.dsc
f859493201cdff49f3df7cad7f73dae69ae8bb3e5001121a20f47dff1b37f066 531904
osmo-bsc_1.15.0.orig.tar.xz
9492bb4300d8654bdd243481598cd34782c9f86ec5b464dc01712ad05268a120 10836
osmo-bsc_1.15.0-2.debian.tar.xz
c77d48456a3da6991b36bc8aa1673ebf4f728b8dee286256e274cb6503f4c878 10368
osmo-bsc_1.15.0-2_amd64.buildinfo
Files:
1fc9e3506a2d719a9b598e2453fa4076 2689 net optional osmo-bsc_1.15.0-2.dsc
cd730f7b4fe3581a48ff0781ae933ebd 531904 net optional
osmo-bsc_1.15.0.orig.tar.xz
f0468cd8957660981f07231dacb5498b 10836 net optional
osmo-bsc_1.15.0-2.debian.tar.xz
b40b34f196f21f43fe36170cca3bce24 10368 net optional
osmo-bsc_1.15.0-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=jEn5
-----END PGP SIGNATURE-----
pgpi7jtOiHRfM.pgp
Description: PGP signature
--- End Message ---
