[Git][security-tracker-team/security-tracker][master] Add new llama.cpp issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b2bfacf2 by Salvatore Bonaccorso at 2026-10-27T17:22:00+01:00
Add new llama.cpp issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -271,7 +271,10 @@ CVE-2026-116842 (DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow
 CVE-2026-116841 (DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnera ...)
 	- devilutionx <itp> (bug #1088174)
 CVE-2026-116840 (llama.cpp b5854 before b11275 contains an integer overflow vulnerabili ...)
-	TODO: check
+	- llama.cpp 1:0.6.0+dfsg-1
+	NOTE: https://github.com/ggml-org/llama.cpp/issues/26978
+	NOTE: https://github.com/ggml-org/llama.cpp/pull/26979
+	NOTE: Fixed by: https://github.com/ggml-org/llama.cpp/commit/a6ea155d3d38b3f6f43d0c0dc29c2d592413ef44 (v0.6.0, b11275)
 CVE-2026-116839 (A malicious actor who lures an authenticated user to a malicious page  ...)
 	NOT-FOR-US: Ubiquity
 CVE-2026-116838 (A malicious actor who lures an authenticated user to a malicious page  ...)
@@ -281,7 +284,10 @@ CVE-2026-116837 (A malicious actor with access to the adjacent network could exp
 CVE-2026-116836 (A malicious actor with access to the adjacent network and under certai ...)
 	NOT-FOR-US: Ubiquity
 CVE-2026-116829 (llama.cpp b10398 before b11301 contains an integer overflow vulnerabil ...)
-	TODO: check
+	- llama.cpp 1:0.6.0+dfsg-1
+	NOTE: https://github.com/ggml-org/llama.cpp/issues/29383
+	NOTE: https://github.com/ggml-org/llama.cpp/pull/29384
+	NOTE: Fixed by: https://github.com/ggml-org/llama.cpp/commit/2149c00f4442dc59302e134a02e4c99d5f7ed9fc (v0.6.0, b11301)
 CVE-2026-116828 (YesWiki before 4.7.0 contains a sql injection vulnerability in despam. ...)
 	NOT-FOR-US: YesWiki
 CVE-2026-116827 (YesWiki before 4.7.0 contains a server-side request forgery vulnerabil ...)
@@ -307,7 +313,10 @@ CVE-2026-116818 (OpenPanel before 3.0.0 contains an unauthenticated ClickHouse s
 CVE-2026-116817 (OpenPanel before 3.0.0 contains a missing authentication vulnerability ...)
 	NOT-FOR-US: OpenPanel
 CVE-2026-116816 (llama.cpp b5899 before b10261 contains a heap out-of-bounds write vuln ...)
-	TODO: check
+	- llama.cpp 10271+dfsg-1
+	NOTE: https://github.com/ggml-org/llama.cpp/pull/25969
+	NOTE: https://github.com/ggml-org/llama.cpp/pull/26511
+	NOTE: Fixed by: https://github.com/ggml-org/llama.cpp/commit/cf06ad7dfe79e7bf2934150d4fefe1ce8db05490 (v0.1.0, b10261)
 CVE-2026-116815 (OpenPanel before 3.0.0 contains an improper escaping vulnerability in  ...)
 	NOT-FOR-US: OpenPanel
 CVE-2026-116814 (OpenPanel before 3.0.0 contains an information exposure vulnerability  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b2bfacf2361fb8f3885c7050f283df37c119c1ac

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b2bfacf2361fb8f3885c7050f283df37c119c1ac
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/befc9180/attachment-0001.htm>