Hi,

The following vulnerability was published for osmo-iuh.

CVE-2026-75894[0]:
| In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found
| in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU
| that leads to process crash and remote denial of service.

https://cgit.osmocom.org/osmo-iuh/commit/?id=f06967126f486bcb185ccf3d1a8f9bc02c4da1f6 (1.8.1)


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-75894
https://www.cve.org/CVERecord?id=CVE-2026-75894

Please adjust the affected versions in the BTS as needed.

We believe that the bug you reported is fixed in the latest version of
osmo-iuh, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1148471@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thorsten Alteholz <debian@alteholz.de> (supplier of updated osmo-iuh package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Mon, 21 Sep 2026 11:23:59 +0200
Source: osmo-iuh
Binary: libosmo-hnbap-dev libosmo-hnbap0t64 libosmo-hnbap0t64-dbgsym libosmo-iuh-dev libosmo-ranap-dev libosmo-ranap7 libosmo-ranap7-dbgsym libosmo-rua-dev libosmo-rua0t64 libosmo-rua0t64-dbgsym libosmo-sabp-dev libosmo-sabp1t64 libosmo-sabp1t64-dbgsym
Architecture: source amd64
Version: 1.8.1+dfsg1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Mobcom Maintainers <Debian-mobcom-maintainers@lists.alioth.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
 libosmo-hnbap-dev - Osmocom code for the Iuh interface (HNBAP), development
 libosmo-hnbap0t64 - Osmocom code for the Iuh interface (HNBAP), library
 libosmo-iuh-dev - Osmocom code for the Iuh interface (common header files)
 libosmo-ranap-dev - Osmocom code for the Iuh interface (RANAP), development
 libosmo-ranap7 - Osmocom code for the Iuh interface (RANAP), library
 libosmo-rua-dev - Osmocom code for the Iuh interface (RUA), development
 libosmo-rua0t64 - Osmocom code for the Iuh interface (RUA), library
 libosmo-sabp-dev - Osmocom code for the Iuh interface (SABP), development
 libosmo-sabp1t64 - Osmocom code for the Iuh interface (SABP), library
Closes: 1148471
Changes:
 osmo-iuh (1.8.1+dfsg1-1) experimental; urgency=medium
 .
   * New upstream release. (Closes: #1148471)
   * debian/rules: rebuild asn1/rua/eurecom/* from AGPL source files
   * adapt debian/*.symbols
Checksums-Sha1:
 bbf79b046681d695f83529609e46d3b2e8b93eeb 2998 osmo-iuh_1.8.1+dfsg1-1.dsc
 3527719ab83dc3b905d1592fcbb82a0b57780513 1292884 osmo-iuh_1.8.1+dfsg1.orig.tar.xz
 4afdfe5433ae645137ab19fbb8c511a9aff3999b 22004 osmo-iuh_1.8.1+dfsg1-1.debian.tar.xz
 a891e05ef0c5223ac4780c1127f53cc90743dd13 21440 libosmo-hnbap-dev_1.8.1+dfsg1-1_amd64.deb
 6bfb40f0a547dab54f7e4f845181c386d18e72fb 381340 libosmo-hnbap0t64-dbgsym_1.8.1+dfsg1-1_amd64.deb
 0ed0ec2a87b13270208c5da32050c56517bedfca 52496 libosmo-hnbap0t64_1.8.1+dfsg1-1_amd64.deb
 d21e41db9accc8bda7d7a3d0228b4eef65d8fc85 3404 libosmo-iuh-dev_1.8.1+dfsg1-1_amd64.deb
 ba82097a5db447dbca51c7b04e646593196458bd 89004 libosmo-ranap-dev_1.8.1+dfsg1-1_amd64.deb
 9a29b4d157e060629984883a35942eac8e9d8151 1668340 libosmo-ranap7-dbgsym_1.8.1+dfsg1-1_amd64.deb
 8c7f2f2cbcb479acb2ffd227af7cf8edbe9c67fa 235356 libosmo-ranap7_1.8.1+dfsg1-1_amd64.deb
 ac158ff01342c0cef5142ca48678b9b9231ba24e 11240 libosmo-rua-dev_1.8.1+dfsg1-1_amd64.deb
 cda02ce97e4e5895dddcc12f3ec70eaf6c42820f 140220 libosmo-rua0t64-dbgsym_1.8.1+dfsg1-1_amd64.deb
 405e8e6f391ac68fdd248250cb7c3386f2ae1c09 26592 libosmo-rua0t64_1.8.1+dfsg1-1_amd64.deb
 3571eb3915a15a380fa7a8c0d7df394295dfd6ed 14464 libosmo-sabp-dev_1.8.1+dfsg1-1_amd64.deb
 130f7e04d8fe13bcd18b47de7df2b7db776795a6 213760 libosmo-sabp1t64-dbgsym_1.8.1+dfsg1-1_amd64.deb
 4172e3f70996f88619d365f7218071bfa2fd75a1 36156 libosmo-sabp1t64_1.8.1+dfsg1-1_amd64.deb
 efa2332ebb3855ac1e1f5beaf862265569a0c887 11018 osmo-iuh_1.8.1+dfsg1-1_amd64.buildinfo
Checksums-Sha256:
 3cd54791f5bbd023a609101f704a647f09e5d0e798995de8cb469d6f8bea1586 2998 osmo-iuh_1.8.1+dfsg1-1.dsc
 f4c1cd97f5d7e32d851219b080f38cc1c7c83e948cfbf2cfe635726245b70742 1292884 osmo-iuh_1.8.1+dfsg1.orig.tar.xz
 5e625e25551a3d7094457070439571d694f366414706a3770f9de13fc92d58ec 22004 osmo-iuh_1.8.1+dfsg1-1.debian.tar.xz
 bf7413a463cfcef03b15561f95fb47acae17c1a81c90c9c5d7e45a7978b1b7f7 21440 libosmo-hnbap-dev_1.8.1+dfsg1-1_amd64.deb
 225e77b2b8b0f931584b4cf0c83c2de4652bc2e16bfc8477704467b81e3ba3e9 381340 libosmo-hnbap0t64-dbgsym_1.8.1+dfsg1-1_amd64.deb
 7b1fb66fee1bb74333eb9d333ee1c1b69b0c6e0c7d6dbb7f2cd92972e223ad66 52496 libosmo-hnbap0t64_1.8.1+dfsg1-1_amd64.deb
 e3d0ecf578b787bd6829a194bb77186cdc72571d38d94e6d7ae7b97fa794ba30 3404 libosmo-iuh-dev_1.8.1+dfsg1-1_amd64.deb
 e57de4979e15ef1556e323602038fb183957c8663aa6bdc0a3eca45e5466d9e7 89004 libosmo-ranap-dev_1.8.1+dfsg1-1_amd64.deb
 200e7aedf894dcbbdbf9fa3e6503cf57bd13fa0ba41e03cf66ade0bff61e8a7d 1668340 libosmo-ranap7-dbgsym_1.8.1+dfsg1-1_amd64.deb
 7c1a657be5ec3be811eeb4e822ff949db057322a23ebe15d3c489433035715b5 235356 libosmo-ranap7_1.8.1+dfsg1-1_amd64.deb
 2217db03e5dbf06582c9f807328f3e3dffffe008fd1ceaf1b55373c60603c831 11240 libosmo-rua-dev_1.8.1+dfsg1-1_amd64.deb
 7e7e8210d7f11376eaabd5987d60e600fae83f59f662e3da44b3468ac96e4d0e 140220 libosmo-rua0t64-dbgsym_1.8.1+dfsg1-1_amd64.deb
 70fc6970bdbcd27db4e38aeb3e28a48e34e6edf944ea99baab31f0410d9fb2bb 26592 libosmo-rua0t64_1.8.1+dfsg1-1_amd64.deb
 77fee57e2ff0a64d6cb7dd2b8960194461848d51649836c284293968a8477f30 14464 libosmo-sabp-dev_1.8.1+dfsg1-1_amd64.deb
 39ee7d3446275bd8093eb94f34308a272cbe17732113501ba3f67156e0acf68e 213760 libosmo-sabp1t64-dbgsym_1.8.1+dfsg1-1_amd64.deb
 3a21513bdd911999e805bc6bddde103d5478192328dc29951e90f01a16bfb47d 36156 libosmo-sabp1t64_1.8.1+dfsg1-1_amd64.deb
 0c32eb0a5d2321561433d939093eee875094e13b3199ce3a57fdd639c0d8d353 11018 osmo-iuh_1.8.1+dfsg1-1_amd64.buildinfo
Files:
 e7e05284976d6bd0e6df2a8c96d8be46 2998 libs optional osmo-iuh_1.8.1+dfsg1-1.dsc
 e02663ececb8fd47ceea36c1163f0785 1292884 libs optional osmo-iuh_1.8.1+dfsg1.orig.tar.xz
 b69c243df7310d125456f1c188c28b2e 22004 libs optional osmo-iuh_1.8.1+dfsg1-1.debian.tar.xz
 29b3fea90badd0379a07e3d14ec02ceb 21440 libdevel optional libosmo-hnbap-dev_1.8.1+dfsg1-1_amd64.deb
 6310d17b901c00007626d4331ffb20b9 381340 debug optional libosmo-hnbap0t64-dbgsym_1.8.1+dfsg1-1_amd64.deb
 d6b2275b3fb43a1f4ae810aae81e1346 52496 libs optional libosmo-hnbap0t64_1.8.1+dfsg1-1_amd64.deb
 777ad86c21fe90c663f15a2c103bda36 3404 libdevel optional libosmo-iuh-dev_1.8.1+dfsg1-1_amd64.deb
 57cb8227a6a084e7ce88630cbe73cb63 89004 libdevel optional libosmo-ranap-dev_1.8.1+dfsg1-1_amd64.deb
 3d5cd822921e247d859bb1e66b1bbcd4 1668340 debug optional libosmo-ranap7-dbgsym_1.8.1+dfsg1-1_amd64.deb
 7eab221021b5053f8b22f28a68305d34 235356 libs optional libosmo-ranap7_1.8.1+dfsg1-1_amd64.deb
 076f5a7bd32d1c201afb5072d85a107a 11240 libdevel optional libosmo-rua-dev_1.8.1+dfsg1-1_amd64.deb
 0a7090ba4122597c89a47b398b0c602c 140220 debug optional libosmo-rua0t64-dbgsym_1.8.1+dfsg1-1_amd64.deb
 63b4a2639708d28758508ff1f7658050 26592 libs optional libosmo-rua0t64_1.8.1+dfsg1-1_amd64.deb
 63ec60a9dbd2d903029ed699ec120453 14464 libdevel optional libosmo-sabp-dev_1.8.1+dfsg1-1_amd64.deb
 f03b9acffa96b9395488efff11fb31bb 213760 debug optional libosmo-sabp1t64-dbgsym_1.8.1+dfsg1-1_amd64.deb
 a9bd83a0aeb5ee5efff64905dc186aca 36156 libs optional libosmo-sabp1t64_1.8.1+dfsg1-1_amd64.deb
 86148fee5daedbc2d234581c8b47c659 11018 libs optional osmo-iuh_1.8.1+dfsg1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----

iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmqxI3ZfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy
MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh
bHRlaG9sei5kZQAKCRCW/KwNOHtYR02nD/95JGK9AYVI7WkV9g1GwCRPV7xiL+v/
HY+rd3mSQX8aGA+pibRmChjV+uFqKTkpI2/YdfLbwgCWh3B0qqTDBoi0e05ao7ib
ojw1MS6g9/aLkd79JB+Zfi+xZfyjpKcTzQxSdsY5/wO9LBdOF7b7SGxBZFsZ4E+2
6VMf7GvvJQy7M4Db8vzPFejjdS6Bad5r8IFR8u0mit2tH+A7yGswpGLFK+tnbOa+
6qbX78/rT/dCLx5mJ+ySNNMWQDO/vfJZA0Gl1xtSJuVIUl7I3eIkZWwhKpiMz5M0
xXeEcNDgWGn0OG9S07J1ISGESHKFR+tK+PlqiZW13j87CvPYE9WR44WFqKs437yG
4vTwQ/8eyA88Tc5uey1ZPL77awkP/0RpxCZxrNhfV8p7ZRiOQmqOKmBiu9hdi1AL
b+h8Bu6hPlopt54nIX9CGKIamF6Nl4e60kmmnlOJusG28IPkf16uBV7XZrDaVG5w
kVblxucF5cc0JunMwYXKWv9pH/VlqXrFO5VO1GBE0LehO2Z5bbT6+cM9XWiuNRz4
/iZRNGcTY3QvEwbjcdOEg3Tj+Tbe5dMhRYtQKeFj3e+mewyosCJJIQynzPktVTLt
L+GQ5hDz0IpXe/8N+rVKwtvTv6ADUNwxwHi/IJ91xKK7h9ddXLKLxqsAndc6EZBL
tlcuqEDWNQIxlA==
=wO7j
-----END PGP SIGNATURE-----