Alerts This Week
Warning Icon 1 540
Alerts This Week
Warning Icon 1 540

Fedora 41: FEDORA-2024-89c69bb9d3 severe llama-cpp global buffer overflow

fedora
Calendar Grey November 14, 2024
Dist Fedora Esm H88
Stay informed about the latest Fedora 41 release concerning llama-cpp, which includes crucial security insights and guidelines for installation.
Update to b3561

Summary

The main goal of llama.cpp is to run the LLaMA model using 4-bit

integer quantization on a MacBook

* Plain C/C++ implementation without dependencies

* Apple silicon first-class citizen - optimized via ARM NEON, Accelerate

and Metal frameworks

* AVX, AVX2 and AVX512 support for x86 architectures

* Mixed F16 / F32 precision

* 2-bit, 3-bit, 4-bit, 5-bit, 6-bit and 8-bit integer quantization support

* CUDA, Metal and OpenCL GPU backend support

The original implementation of llama.cpp was hacked in an evening.

Since then, the project has improved significantly thanks to many

contributions. This project is mainly for educational purposes and

serves as the main playground for developing new features for the

ggml library.

Update Information:

Update to b3561

Topics%20covered

Topics Covered

security advisory update Fedora product update global buffer overflow llama-cpp

Change Log

* Tue Nov 5 2024 Tom Rix - b3561-1 - Update to b3561 * Thu Jul 18 2024 Fedora Release Engineering - b3184-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sat Jun 22 2024 Mohammadreza Hendiani - b3184-3 - added changelog * Sat Jun 22 2024 Mohammadreza Hendiani - b3184-2 - added .pc file * Sat Jun 22 2024 Mohammadreza Hendiani - b3184-1 - upgraded to b3184 which is used by llama-cpp-python v0.2.79 * Tue May 21 2024 Mohammadreza Hendiani - b2879-7 - removed old file names .gitignore * Sun May 19 2024 Tom Rix - b2879-6 - Remove old sources * Sun May 19 2024 Tom Rix - b2879-5 - Include missing sources

References


[ 1 ] Bug #2304782 - CVE-2024-42477 llama-cpp: global-buffer-overflow in ggml_type_size [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2304782

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-89c69bb9d3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: llama-cpp
Product: Fedora 41
Version: b3561
Release: 1.fc41
URL: https://github.com/ggml-org/llama.cpp
Summary: Port of Facebook's LLaMA model in C/C++

Topics%20covered

Topics Covered

security advisory update Fedora product update global buffer overflow llama-cpp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here