[Git][security-tracker-team/security-tracker][master] Add two llama.cpp issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
061f0b9f by Salvatore Bonaccorso at 2026-10-27T06:30:36+01:00
Add two llama.cpp issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -231,7 +231,8 @@ CVE-2026-116471 (A security flaw has been discovered in BKWLD Decoy up to 5.11.1
 CVE-2026-116469 (MISP Guard, a proxy-based security filter for MISP (Malware Informatio ...)
 	NOT-FOR-US: MISP Guard
 CVE-2026-116467 (A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. ...)
-	TODO: check
+	- llama.cpp <unfixed>
+	NOTE: https://github.com/ggml-org/llama.cpp/pull/29992
 CVE-2026-116463 (A vulnerability was identified in FastStone Image Viewer up to 8.5. Af ...)
 	NOT-FOR-US: FastStone Image Viewer
 CVE-2026-116461 (A vulnerability was determined in Omega Solution Restro POS up to 2026 ...)
@@ -731,7 +732,9 @@ CVE-2026-116098 (A vulnerability was detected in SteelRaven7 Ravenfield 25407073
 CVE-2026-116097 (A security vulnerability has been detected in CloudClassroom-PHP-Proje ...)
 	NOT-FOR-US: CloudClassroom-PHP-Project
 CVE-2026-116096 (A weakness has been identified in ggml-org llama.cpp. Affected by this ...)
-	TODO: check
+	- llama.cpp <unfixed>
+	NOTE: https://github.com/ggml-org/llama.cpp/pull/30902
+	NOTE: Fixed by: https://github.com/ggml-org/llama.cpp/commit/0a1ef309cdbb9f2024f58a38fb4c42352c5db569
 CVE-2026-116095 (A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1. ...)
 	NOT-FOR-US: smg-project smg
 CVE-2026-116094 (A vulnerability was determined in EyouCMS up to 1.8.3. This impacts th ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/061f0b9fd28bbaac3dd6034981a4ca5b55d6aaca

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/061f0b9fd28bbaac3dd6034981a4ca5b55d6aaca
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/924a86f7/attachment.htm>