llama.cpp - Debian Package Tracker

general

source: llama.cpp (main)
version: 8461+dfsg-1
maintainer: Debian Deep Learning Team (archive) (DMD)
uploaders: Christian Kastner [DMD]
arch: all any
std-ver: 4.7.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

unstable: 8461+dfsg-1

versioned links

8064+dfsg-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
8461+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libllama-dev
libllama0
llama.cpp (2 bugs: 0, 2, 0, 0)
llama.cpp-examples
llama.cpp-tests
llama.cpp-tools (2 bugs: 0, 1, 1, 0)
llama.cpp-tools-extra
python3-gguf

action needed

Debci reports failed tests high

unstable: fail (log)
The tests ran in 0:04:54
Last run: 2026-03-30T23:23:09.000Z
Previous status: unknown

Created: 2026-03-31 Last update: 2026-04-01 06:31

A new upstream version is available: 8589 high

A new upstream version 8589 is available, you should consider packaging it.

Created: 2026-03-27 Last update: 2026-04-01 04:19

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2026-2069: A flaw has been found in ggml-org llama.cpp up to 55abc39. Impacted is the function llama_grammar_advance_stack of the file llama.cpp/src/llama-grammar.cpp of the component GBNF Grammar Handler. This manipulation causes stack-based buffer overflow. The attack needs to be launched locally. The exploit has been published and may be used. Patch name: 18993. To fix this issue, it is recommended to deploy a patch.
CVE-2026-21869: llama.cpp is an inference of several LLM models in C/C++. In commits 55d4206c8 and prior, the n_discard parameter is parsed directly from JSON input in the llama.cpp server's completion endpoints without validation to ensure it's non-negative. When a negative value is supplied and the context fills up, llama_memory_seq_rm/add receives a reversed range and negative offset, causing out-of-bounds memory writes in the token evaluation loop. This deterministic memory corruption can crash the process or enable remote code execution (RCE). There is no fix at the time of publication.

Created: 2026-01-08 Last update: 2026-03-27 18:33

5 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 1ae3166e0b72d95ce2eb5cdba42778f8c86b77d0
Merge: 6b2b903 19822a7
Author: Christian Kastner <ckk@kvr.at>
Date:   Tue Mar 31 19:12:52 2026 +0000

    Merge branch 'fix-autopkgtest-failure' into 'debian/unstable'
    
    d/t/upstream-basic: add test-arg-parser to skip_tests
    
    See merge request deeplearning-team/llama.cpp!6

commit 19822a72bf641b051f1eb5d9967e0e69bbfd2ce9
Author: Talha Can Havadar <talha.can.havadar@canonical.com>
Date:   Tue Mar 31 13:03:19 2026 +0200

    d/t/upstream-basic: skip test-llama-archs as known to be broken
    
    This test is known to be broken by upstream and it is being skipped in
    their CI as well.
    
    Gbp-Dch: full

commit 2f5e9e727a6bc9f93d76029761380c6e6d85b7df
Author: Talha Can Havadar <talha.can.havadar@canonical.com>
Date:   Tue Mar 31 10:20:43 2026 +0200

    d/t/upstream-basic: skip test-chat-auto-parse as it requires templates
    
    models directory in upstream repo skipped due to discrepancy around
    licensing and this test requires templates resides in models directory
    hence it is causing autopkgtest failures.
    
    Gbp-Dch: full

commit efbc74a7f04e8cf03fdaaa0e99d8311ce3a23e81
Author: Talha Can Havadar <talha.can.havadar@canonical.com>
Date:   Fri Mar 6 13:09:24 2026 +0100

    d/t/upstream-basic: add test-arg-parser to skip_tests
    
    test-arg-parser uses internet to check the validity of given url which
    causes issue when test run in an environment with no internet access.
    
    Gbp-Dch: full

commit 02218bce398c83897245fd670ef9b90dc930e86d
Author: Talha Can Havadar <talha.can.havadar@canonical.com>
Date:   Tue Mar 3 22:30:25 2026 +0100

    d/t/control: add missing dpkg-dev dependency for upstream-basic

Created: 2026-03-31 Last update: 2026-03-31 20:00

lintian reports 8 warnings normal

Lintian reports 8 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2026-03-27 Last update: 2026-03-27 23:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.3).

Created: 2026-03-31 Last update: 2026-03-31 15:01

testing migrations

This package will soon be part of the auto-openssl transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
excuses:
- Migrates after: ggml
- Migration status for llama.cpp (- to 8461+dfsg-1): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Autopkgtest for llama.cpp/8461+dfsg-1: amd64: Failed ♻, arm64: Failed ♻, ppc64el: Failed ♻, s390x: Failed ♻
- ∙ ∙ llama.cpp unsatisfiable Build-Depends(-Arch) on riscv64: libggml-dev (>= 0.9.8)
- ∙ ∙ Missing build on riscv64
- ∙ ∙ Autopkgtest deferred on riscv64: missing arch:riscv64 build
- ∙ ∙ Lintian check waiting for test results on riscv64 - info
- ∙ ∙ Build-Depends(-Arch): llama.cpp ggml (not considered)
- ∙ ∙ Depends: llama.cpp ggml (not considered)
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/l/llama.cpp.html
- ∙ ∙ Autopkgtest skipped on i386: not installable (which is allowed)
- ∙ ∙ New but not reproduced on amd64: llama.cpp-examples, llama.cpp-tools, llama.cpp-tools-extra
- ∙ ∙ Reproduced on arm64
- ∙ ∙ Reproduced on armhf
- ∙ ∙ Reproduced on i386
- ∙ ∙ New but not reproduced on ppc64el: llama.cpp-examples, llama.cpp-tools, llama.cpp-tools-extra
- ∙ ∙ 5 days old (needed 5 days)
- Not considered

news

[rss feed]

[2026-03-27] Accepted llama.cpp 8461+dfsg-1 (source) into unstable (Christian Kastner)
[2026-03-12] Accepted llama.cpp 8064+dfsg-2 (source) into unstable (Mathieu Baudier) (signed by: Christian Kastner)
[2026-02-15] Accepted llama.cpp 8064+dfsg-1 (source) into unstable (Christian Kastner)
[2026-02-08] Accepted llama.cpp 7965+dfsg-1 (source) into unstable (Christian Kastner)
[2026-01-16] Accepted llama.cpp 7593+dfsg-3 (source) into unstable (Christian Kastner)
[2026-01-11] Accepted llama.cpp 7593+dfsg-2 (source) into unstable (Christian Kastner)
[2026-01-04] Accepted llama.cpp 7593+dfsg-1 (source) into unstable (Christian Kastner)
[2025-12-28] Accepted llama.cpp 6641+dfsg-3 (source) into unstable (Christian Kastner)
[2025-12-23] Accepted llama.cpp 6641+dfsg-2 (source) into unstable (Christian Kastner)
[2025-10-13] llama.cpp REMOVED from testing (Debian testing watch)
[2025-10-06] Accepted llama.cpp 6641+dfsg-1 (source) into unstable (Christian Kastner)
[2025-09-14] Accepted llama.cpp 5882+dfsg-4 (source) into unstable (Christian Kastner)
[2025-09-12] llama.cpp 5882+dfsg-3 MIGRATED to testing (Debian testing watch)
[2025-08-27] Accepted llama.cpp 5882+dfsg-3 (source) into unstable (Christian Kastner)
[2025-08-26] Accepted llama.cpp 5882+dfsg-3~exp2 (source amd64 all) into experimental (Debian FTP Masters) (signed by: Christian Kastner)
[2025-08-26] Accepted llama.cpp 5882+dfsg-3~exp3 (source amd64 all) into experimental (Debian FTP Masters) (signed by: Christian Kastner)
[2025-08-26] Accepted llama.cpp 5882+dfsg-3~exp1 (source amd64 all) into experimental (Debian FTP Masters) (signed by: Christian Kastner)
[2025-07-13] Accepted llama.cpp 5882+dfsg-2 (source) into unstable (Christian Kastner)
[2025-07-12] Accepted llama.cpp 5882+dfsg-1 (source) into unstable (Christian Kastner)
[2025-07-08] Accepted llama.cpp 5760+dfsg-4 (source) into unstable (Christian Kastner)
[2025-07-07] Accepted llama.cpp 5760+dfsg-3 (source) into unstable (Christian Kastner)
[2025-06-27] Accepted llama.cpp 5760+dfsg-2 (source) into unstable (Christian Kastner)
[2025-06-27] Accepted llama.cpp 5760+dfsg-1 (source) into unstable (Christian Kastner)
[2025-06-20] Accepted llama.cpp 5713+dfsg-1 (source) into unstable (Christian Kastner)
[2025-06-19] Accepted llama.cpp 5318+dfsg-2 (source) into unstable (Christian Kastner)
[2025-05-09] Accepted llama.cpp 5318+dfsg-1 (source) into unstable (Christian Kastner)
[2025-04-20] Accepted llama.cpp 5151+dfsg-1~exp3 (source amd64) into experimental (Debian FTP Masters) (signed by: Christian Kastner)
[2025-04-20] Accepted llama.cpp 5151+dfsg-1~exp2 (source amd64) into experimental (Debian FTP Masters) (signed by: Christian Kastner)

bugs [bug history graph]

all: 6
RC: 0
I&N: 5
M&W: 1
F&P: 0
patch: 0

links

homepage
lintian (0, 8)
buildd: logs, cross
popcon
browse source code
edit tags
other distros
security tracker
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 8064+dfsg-1ubuntu1
1 bug
patches for 8064+dfsg-1ubuntu1