Actually, Ron,
there is no bug here. I was quite sure of my SIM configuration, but in fact it was programmed to use COMP128v3, not v1, and hence I got a differing SRES upon Auth Response.
Double check that your SIM/USIM is configured to use COMP128v1 for 2G! For example, try to configure COMP128v3 in the HLR and see if that helps.
I've rejected issue #3017 now. It all works. (Feels good to be able to say that for a change.)
~N