[Git][security-tracker-team/security-tracker][master] Add new issues in libosmocore

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4d20a6e1 by Salvatore Bonaccorso at 2026-10-27T06:54:33+01:00
Add new issues in libosmocore

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -611,13 +611,22 @@ CVE-2026-105626 (HashiCorp Consul and Consul Enterprise are vulnerable to a deni
 CVE-2026-105608 (HashiCorp Consul and Consul Enterprise are vulnerable to an authorizat ...)
 	- consul <removed>
 CVE-2026-104594 (libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM ...)
-	TODO: check
+	- libosmocore 1.14.2-1
+	NOTE: https://osmocom.org/issues/7050
+	NOTE: Fixed by: https://github.com/osmocom/libosmocore/commit/8ba652bca2f28ec05ff5979846199e2c46657633 (1.14.2)
+	NOTE: Fixed by: https://github.com/osmocom/libosmocore/commit/325ffb5204d7e1659ca2fec3b2f14c33b969ee71 (1.14.2)
+	NOTE: Fixed by: https://github.com/osmocom/libosmocore/commit/afd18bf00147e17c495fc909ac4583b3bf734d53 (1.14.2)
 CVE-2026-104593 (osmo-msc through 1.15.0 contains a stack-based buffer overflow in deco ...)
 	TODO: check
 CVE-2026-104592 (libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP  ...)
-	TODO: check
+	- libosmocore 1.14.2-1
+	NOTE: https://osmocom.org/issues/7053
+	NOTE: https://gerrit.osmocom.org/c/libosmocore/+/43215
+	NOTE: Fixed by: https://github.com/osmocom/libosmocore/commit/1659b5874223934d5586e3e96b7d59f653c90ea6 (1.14.2)
 CVE-2026-104591 (libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_com ...)
-	TODO: check
+	- libosmocore 1.14.2-1
+	NOTE: https://osmocom.org/issues/7052
+	NOTE: Fixed by: https://github.com/osmocom/libosmocore/commit/0b0f165106b7918435a47f8cb28c651228b8e4aa (1.14.2)
 CVE-2026-103377 (A reflected Cross-Site Scripting (XSS) vulnerability has been identifi ...)
 	NOT-FOR-US: Castile-La Mancha Regional Parliament's video library
 CVE-2026-102649 (Burrito is a Terraform Automation Collaboration Software (TACoS) Kuber ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4d20a6e146e467b0cc1745c01ec8b9692feda60a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4d20a6e146e467b0cc1745c01ec8b9692feda60a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/a29c6f00/attachment.htm>