Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
89
security advisoryupdateFedoraFedora 41: FEDORA-2024-89c69bb9d3 severe llama-cpp global buffer overflow
Update to b3561. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-89c69bb9d3 2024-11-14 03:00:19.249660 -------------------------------------------------------------------------------- Name : llama-cpp Product : Fedora 41 Version : b3561 Release : 1.fc41 URL : https://github.com/ggml-org/llama.cpp Summary : Port of Facebook's LLaMA model in C/C++ Description : The main goal of llama.cpp is to run the LLaMA model using 4-bit integer quantization on a MacBook * Plain C/C++ implementation without dependencies * Apple silicon first-class citizen - optimized via ARM NEON, Accelerate and Metal frameworks * AVX, AVX2 and AVX512 support for x86 architectures * Mixed F16 / F32 precision * 2-bit, 3-bit, 4-bit, 5-bit, 6-bit and 8-bit integer quantization support * CUDA, Metal and OpenCL GPU backend support The original implementation of llama.cpp was hacked in an evening. Since then, the project has improved significantly thanks to many contributions. This project is mainly for educational purposes and serves as the main playground for developing new features for the ggml library. -------------------------------------------------------------------------------- Update Information: Update to b3561 -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 5 2024 Tom Rix - b3561-1 - Update to b3561 * Thu Jul 18 2024 Fedora Release Engineering - b3184-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sat Jun 22 2024 Mohammadreza Hendiani - b3184-3 - added changelog * Sat Jun 22 2024 Mohammadreza Hendiani - b3184-2 - added .pc file * Sat Jun 22 2024 Mohammadreza Hendiani - b3184-1 - upgraded to b3184 which is used by llama-cpp-python v0.2.79 * Tue May 21 2024 Mohammadreza Hendiani - b2879-7 - removed old file names .gitignore * Sun May 19 2024 Tom Rix - b2879-6 - Remove old sources * SunMay 19 2024 Tom Rix - b2879-5 - Include missing sources -------------------------------------------------------------------------------- References: [ 1 ] Bug #2304782 - CVE-2024-42477 llama-cpp: global-buffer-overflow in ggml_type_size [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2304782 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-89c69bb9d3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Nov 14, 2024
Fedora
202
security advisorysoftware issueimportant updateopenSUSE 15.4: 2023:3699-1 Important: Global Buffer Overflow in libxml2
This update for libxml2 fixes the following issues: CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).. # Security update for libxml2 Announcement ID: SUSE-SU-2023:3699-1 Rating: important References: * #1214768 Cross-References: * CVE-2023-39615 CVSS scores: * CVE-2023-39615 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-39615 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * openSUSE Leap 15.4 * Python 3 Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for libxml2 fixes the following issues: * CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2023-3699=1 openSUSE-SLE-15.4-2023-3699=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3699=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-3699=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3699=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-3699=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3699=1 * Python 3 Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Python3-15-SP4-2023-3699=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libxml2-tools-debuginfo-2.9.14-150400.5.22.1 * python311-libxml2-debuginfo-2.9.14-150400.5.22.1 * libxml2-debugsource-2.9.14-150400.5.22.1 * libxml2-2-2.9.14-150400.5.22.1 * libxml2-python-debugsource-2.9.14-150400.5.22.1 * python3-libxml2-debuginfo-2.9.14-150400.5.22.1 * python311-libxml2-2.9.14-150400.5.22.1 * libxml2-tools-2.9.14-150400.5.22.1 * libxml2-devel-2.9.14-150400.5.22.1 * python3-libxml2-2.9.14-150400.5.22.1 * libxml2-2-debuginfo-2.9.14-150400.5.22.1 * openSUSE Leap 15.4 (x86_64) * libxml2-2-32bit-2.9.14-150400.5.22.1 * libxml2-2-32bit-debuginfo-2.9.14-150400.5.22.1 * libxml2-devel-32bit-2.9.14-150400.5.22.1 * openSUSE Leap 15.4 (noarch) * libxml2-doc-2.9.14-150400.5.22.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libxml2-2-64bit-2.9.14-150400.5.22.1 * libxml2-devel-64bit-2.9.14-150400.5.22.1 * libxml2-2-64bit-debuginfo-2.9.14-150400.5.22.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libxml2-tools-debuginfo-2.9.14-150400.5.22.1 * libxml2-python-debugsource-2.9.14-150400.5.22.1 * libxml2-debugsource-2.9.14-150400.5.22.1 * libxml2-2-2.9.14-150400.5.22.1 * python3-libxml2-debuginfo-2.9.14-150400.5.22.1 * libxml2-tools-2.9.14-150400.5.22.1 * python3-libxml2-2.9.14-150400.5.22.1 * libxml2-2-debuginfo-2.9.14-150400.5.22.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libxml2-tools-debuginfo-2.9.14-150400.5.22.1 * libxml2-python-debugsource-2.9.14-150400.5.22.1 * libxml2-debugsource-2.9.14-150400.5.22.1 * libxml2-2-2.9.14-150400.5.22.1 * python3-libxml2-debuginfo-2.9.14-150400.5.22.1 * libxml2-tools-2.9.14-150400.5.22.1 * python3-libxml2-2.9.14-150400.5.22.1 *libxml2-2-debuginfo-2.9.14-150400.5.22.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libxml2-tools-debuginfo-2.9.14-150400.5.22.1 * libxml2-python-debugsource-2.9.14-150400.5.22.1 * libxml2-debugsource-2.9.14-150400.5.22.1 * libxml2-2-2.9.14-150400.5.22.1 * python3-libxml2-debuginfo-2.9.14-150400.5.22.1 * libxml2-tools-2.9.14-150400.5.22.1 * python3-libxml2-2.9.14-150400.5.22.1 * libxml2-2-debuginfo-2.9.14-150400.5.22.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libxml2-tools-debuginfo-2.9.14-150400.5.22.1 * libxml2-python-debugsource-2.9.14-150400.5.22.1 * libxml2-debugsource-2.9.14-150400.5.22.1 * libxml2-2-2.9.14-150400.5.22.1 * python3-libxml2-debuginfo-2.9.14-150400.5.22.1 * libxml2-tools-2.9.14-150400.5.22.1 * python3-libxml2-2.9.14-150400.5.22.1 * libxml2-2-debuginfo-2.9.14-150400.5.22.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * libxml2-tools-debuginfo-2.9.14-150400.5.22.1 * libxml2-debugsource-2.9.14-150400.5.22.1 * libxml2-2-2.9.14-150400.5.22.1 * python3-libxml2-debuginfo-2.9.14-150400.5.22.1 * libxml2-tools-2.9.14-150400.5.22.1 * libxml2-devel-2.9.14-150400.5.22.1 * python3-libxml2-2.9.14-150400.5.22.1 * libxml2-2-debuginfo-2.9.14-150400.5.22.1 * Basesystem Module 15-SP4 (x86_64) * libxml2-2-32bit-2.9.14-150400.5.22.1 * libxml2-2-32bit-debuginfo-2.9.14-150400.5.22.1 * Python 3 Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-libxml2-2.9.14-150400.5.22.1 * python311-libxml2-debuginfo-2.9.14-150400.5.22.1 ## References: * https://www.suse.com/security/cve/CVE-2023-39615.html * https://bugzilla.suse.com/show_bug.cgi?id=1214768 . The latest libxml2 patch for openSUSE resolves significant global buffer overflow vulnerabilities that arise from specially designed XML data.. openSUSE Update, Libxml2 Fix, Buffer Overflow, Security Patch. . Severity: Important. LinuxSecurity.com Team
Sep 20, 2023
•Important
OpenSUSE
100
security advisorybuffer overflowimportantSUSE: 2020:0397-1 Important: php72 Three Fixes for Security Issues
An update that fixes three vulnerabilities is now available. . SUSE Security Update: Security update for php72 ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:0397-1 Rating: important References: #1161982 #1162629 #1162632 Cross-References: CVE-2019-20433 CVE-2020-7059 CVE-2020-7060 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE Linux Enterprise Software Development Kit 12-SP4 SUSE Linux Enterprise Module for Web Scripting 12 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for php72 fixes the following issues: Security issues fixed: - CVE-2020-7059: Fixed an out-of-bounds read in php_strip_tags_ex (bsc#1162629). - CVE-2020-7060: Fixed a global buffer-overflow in mbfl_filt_conv_big5_wchar (bsc#1162632). - CVE-2019-20433: Fixed a buffer over-read when processing strings ending with a single '\0' byte with ucs-2 and ucs-4 encoding (bsc#1161982). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2020-397=1 - SUSE Linux Enterprise Software Development Kit 12-SP4: zypper in -t patch SUSE-SLE-SDK-12-SP4-2020-397=1 - SUSE Linux Enterprise Module for Web Scripting 12: zypper in -t patch SUSE-SLE-Module-Web-Scripting-12-2020-397=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): php72-debuginfo-7.2.5-1.37.1 php72-debugsource-7.2.5-1.37.1 php72-devel-7.2.5-1.37.1 - SUSE Linux EnterpriseSoftware Development Kit 12-SP4 (aarch64 ppc64le s390x x86_64): php72-debuginfo-7.2.5-1.37.1 php72-debugsource-7.2.5-1.37.1 php72-devel-7.2.5-1.37.1 - SUSE Linux Enterprise Module for Web Scripting 12 (aarch64 ppc64le s390x x86_64): apache2-mod_php72-7.2.5-1.37.1 apache2-mod_php72-debuginfo-7.2.5-1.37.1 php72-7.2.5-1.37.1 php72-bcmath-7.2.5-1.37.1 php72-bcmath-debuginfo-7.2.5-1.37.1 php72-bz2-7.2.5-1.37.1 php72-bz2-debuginfo-7.2.5-1.37.1 php72-calendar-7.2.5-1.37.1 php72-calendar-debuginfo-7.2.5-1.37.1 php72-ctype-7.2.5-1.37.1 php72-ctype-debuginfo-7.2.5-1.37.1 php72-curl-7.2.5-1.37.1 php72-curl-debuginfo-7.2.5-1.37.1 php72-dba-7.2.5-1.37.1 php72-dba-debuginfo-7.2.5-1.37.1 php72-debuginfo-7.2.5-1.37.1 php72-debugsource-7.2.5-1.37.1 php72-dom-7.2.5-1.37.1 php72-dom-debuginfo-7.2.5-1.37.1 php72-enchant-7.2.5-1.37.1 php72-enchant-debuginfo-7.2.5-1.37.1 php72-exif-7.2.5-1.37.1 php72-exif-debuginfo-7.2.5-1.37.1 php72-fastcgi-7.2.5-1.37.1 php72-fastcgi-debuginfo-7.2.5-1.37.1 php72-fileinfo-7.2.5-1.37.1 php72-fileinfo-debuginfo-7.2.5-1.37.1 php72-fpm-7.2.5-1.37.1 php72-fpm-debuginfo-7.2.5-1.37.1 php72-ftp-7.2.5-1.37.1 php72-ftp-debuginfo-7.2.5-1.37.1 php72-gd-7.2.5-1.37.1 php72-gd-debuginfo-7.2.5-1.37.1 php72-gettext-7.2.5-1.37.1 php72-gettext-debuginfo-7.2.5-1.37.1 php72-gmp-7.2.5-1.37.1 php72-gmp-debuginfo-7.2.5-1.37.1 php72-iconv-7.2.5-1.37.1 php72-iconv-debuginfo-7.2.5-1.37.1 php72-imap-7.2.5-1.37.1 php72-imap-debuginfo-7.2.5-1.37.1 php72-intl-7.2.5-1.37.1 php72-intl-debuginfo-7.2.5-1.37.1 php72-json-7.2.5-1.37.1 php72-json-debuginfo-7.2.5-1.37.1 php72-ldap-7.2.5-1.37.1 php72-ldap-debuginfo-7.2.5-1.37.1 php72-mbstring-7.2.5-1.37.1 php72-mbstring-debuginfo-7.2.5-1.37.1 php72-mysql-7.2.5-1.37.1 php72-mysql-debuginfo-7.2.5-1.37.1 php72-odbc-7.2.5-1.37.1 php72-odbc-debuginfo-7.2.5-1.37.1 php72-opcache-7.2.5-1.37.1 php72-opcache-debuginfo-7.2.5-1.37.1 php72-openssl-7.2.5-1.37.1 php72-openssl-debuginfo-7.2.5-1.37.1 php72-pcntl-7.2.5-1.37.1 php72-pcntl-debuginfo-7.2.5-1.37.1 php72-pdo-7.2.5-1.37.1 php72-pdo-debuginfo-7.2.5-1.37.1 php72-pgsql-7.2.5-1.37.1 php72-pgsql-debuginfo-7.2.5-1.37.1 php72-phar-7.2.5-1.37.1 php72-phar-debuginfo-7.2.5-1.37.1 php72-posix-7.2.5-1.37.1 php72-posix-debuginfo-7.2.5-1.37.1 php72-pspell-7.2.5-1.37.1 php72-pspell-debuginfo-7.2.5-1.37.1 php72-readline-7.2.5-1.37.1 php72-readline-debuginfo-7.2.5-1.37.1 php72-shmop-7.2.5-1.37.1 php72-shmop-debuginfo-7.2.5-1.37.1 php72-snmp-7.2.5-1.37.1 php72-snmp-debuginfo-7.2.5-1.37.1 php72-soap-7.2.5-1.37.1 php72-soap-debuginfo-7.2.5-1.37.1 php72-sockets-7.2.5-1.37.1 php72-sockets-debuginfo-7.2.5-1.37.1 php72-sodium-7.2.5-1.37.1 php72-sodium-debuginfo-7.2.5-1.37.1 php72-sqlite-7.2.5-1.37.1 php72-sqlite-debuginfo-7.2.5-1.37.1 php72-sysvmsg-7.2.5-1.37.1 php72-sysvmsg-debuginfo-7.2.5-1.37.1 php72-sysvsem-7.2.5-1.37.1 php72-sysvsem-debuginfo-7.2.5-1.37.1 php72-sysvshm-7.2.5-1.37.1 php72-sysvshm-debuginfo-7.2.5-1.37.1 php72-tidy-7.2.5-1.37.1 php72-tidy-debuginfo-7.2.5-1.37.1 php72-tokenizer-7.2.5-1.37.1 php72-tokenizer-debuginfo-7.2.5-1.37.1 php72-wddx-7.2.5-1.37.1 php72-wddx-debuginfo-7.2.5-1.37.1 php72-xmlreader-7.2.5-1.37.1 php72-xmlreader-debuginfo-7.2.5-1.37.1 php72-xmlrpc-7.2.5-1.37.1 php72-xmlrpc-debuginfo-7.2.5-1.37.1 php72-xmlwriter-7.2.5-1.37.1 php72-xmlwriter-debuginfo-7.2.5-1.37.1 php72-xsl-7.2.5-1.37.1 php72-xsl-debuginfo-7.2.5-1.37.1 php72-zip-7.2.5-1.37.1 php72-zip-debuginfo-7.2.5-1.37.1 php72-zlib-7.2.5-1.37.1 php72-zlib-debuginfo-7.2.5-1.37.1 - SUSE Linux Enterprise Module for Web Scripting 12 (noarch): php72-pear-7.2.5-1.37.1 php72-pear-Archive_Tar-7.2.5-1.37.1 References: https://www.suse.com/security/cve/CVE-2019-20433.html https://www.suse.com/security/cve/CVE-2020-7059.html https://www.suse.com/security/cve/CVE-2020-7060.html https://bugzilla.suse.com/1161982 https://bugzilla.suse.com/1162629 https://bugzilla.suse.com/1162632 _______________________________________________ sle-security-updates mailing list
Feb 18, 2020
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!