[Git][security-tracker-team/security-tracker][master] Add CVE-2026-110810/whisper.cpp

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f7d54d48 by Salvatore Bonaccorso at 2026-10-16T08:04:57+02:00
Add CVE-2026-110810/whisper.cpp

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1017,7 +1017,10 @@ CVE-2026-110816 (### Summary    `qs.stringify` with `arrayFormat: 'comma'` throw
 	NOTE: https://github.com/ljharb/qs/security/advisories/GHSA-6pq8-jhm2-2vcw
 	NOTE: https://github.com/ljharb/qs/commit/a952e7519338ef0cfb25694a2988848f93333727 (v6.16.1)
 CVE-2026-110810 (A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This ...)
-	TODO: check
+	- whisper.cpp 1.9.5+dfsg-1
+	NOTE: https://github.com/ggml-org/whisper.cpp/issues/4090
+	NOTE: https://github.com/ggml-org/whisper.cpp/pull/4091
+	NOTE: Fixed by: https://github.com/ggml-org/whisper.cpp/commit/60c0be6ac8fa71b1a2ae2dd938a31a34a508e774 (b5454, v1.9.5)
 CVE-2026-110809 (A security vulnerability has been detected in sgl-project SGLang up to ...)
 	NOT-FOR-US: SGLang
 CVE-2026-110807 (A weakness has been identified in sgl-project SGLang up to 0.5.19. Aff ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f7d54d4848728aceec4762efe47e66ce34fe3c89

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f7d54d4848728aceec4762efe47e66ce34fe3c89
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/504aae8f/attachment-0001.htm>