UbuntuUpdates.org

Package "memcached"

Name: memcached

Description:

High-performance in-memory object caching system
Latest version: 1.6.21-1ubuntu0.23.10.1
Release: mantic (23.10)
Level: security
Repository: main
Homepage: https://memcached.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "memcached"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "memcached" in Mantic

Repository Area Version
base main 1.6.21-1
updates main 1.6.21-1ubuntu0.23.10.1

Changelog

Version: 1.6.21-1ubuntu0.23.10.1 2023-11-13 17:07:06 UTC

  memcached (1.6.21-1ubuntu0.23.10.1) mantic-security; urgency=medium

  * SECURITY UPDATE: buffer overflow via multiget requests in proxy mode
    - debian/patches/CVE-2023-46852.patch: fix buffer overflow with
      multiget syntax in proto_proxy.c, t/proxyunits.t.
    - CVE-2023-46852
  * SECURITY UPDATE: off-by-one error via proxy requests in proxy mode
    - debian/patches/CVE-2023-46853.patch: fix off-by-one if \r is missing
      in proxy.h, proxy_request.c, t/proxy.t.
    - CVE-2023-46853

 -- Marc Deslauriers <email address hidden> Wed, 01 Nov 2023 09:41:02 -0400
CVE-2023-46852 In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the "get" substr
CVE-2023-46853 In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n.


About   -   Send Feedback to @ubuntu_updates