[Git][security-tracker-team/security-tracker][master] new libosmocore issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
96b14ff1 by Moritz Muehlenhoff at 2026-11-01T23:17:18+01:00
new libosmocore issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8794,9 +8794,15 @@ CVE-2026-104598 (libosmo-sigtran through 2.2.1 contains an out-of-bounds read in
 	NOTE: https://osmocom.org/issues/7056
 	NOTE: https://github.com/osmocom/libosmo-sigtran/commit/b554131f2cbb20ca9a9cf51ca17d73f644eff1f8
 CVE-2026-104597 (libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_i ...)
-	TODO: check
+	- libosmocore 1.14.2-1
+	[trixie] - libosmocore <no-dsa> (Minor issue)
+	NOTE: https://osmocom.org/issues/7052
+	NOTE: https://github.com/osmocom/libosmocore/commit/89e5ade1a01953752a53d83da4ba0b3ddbc30e30 (1.14.2)
 CVE-2026-104596 (libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04. ...)
-	TODO: check
+	- libosmocore 1.14.2-1
+	[trixie] - libosmocore <no-dsa> (Minor issue)
+	NOTE: https://osmocom.org/issues/7051
+	NOTE: https://github.com/osmocom/libosmocore/commit/b6c8c72c0c063ab2f293c5226472341c432454c2 (1.14.2)
 CVE-2026-103359 (The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1. ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-103332 (The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/96b14ff1b3dd6d035c2521acdc40d1c89902f8f9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/96b14ff1b3dd6d035c2521acdc40d1c89902f8f9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261101/b8d7404f/attachment.htm>