Package "memcached"

  memcached (1.5.22-2ubuntu0.3) focal-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2022-48571.patch: fix a null reference crash in
      memcached.c.
    - CVE-2022-48571

 -- Leonidas Da Silva Barbosa <email address hidden> Thu, 07 Sep 2023 09:42:48 -0300

  memcached (1.5.22-2ubuntu0.2) focal; urgency=medium

  * Enable TLS capabilities present in Memcached since version 1.5.13.
    TLS support is required in order to harden Memcached deployments in
    cloud environments or similar scenarios where the network is not to
    be entirely trusted. (LP: #1887943)
    - d/rules: set --enable-tls
    - d/control: add libio-socket-ssl-perl to run build time ssl tests
    - d/control: add libssl dependency

 -- Moisés Guimarães de Medeiros <email address hidden> Mon, 24 Aug 2020 15:14:26 +0200

  memcached (1.5.22-2ubuntu0.1) focal; urgency=medium

  * d/p/fix-bug-where-sasl-will-load-config-the-wrong-path.patch:
    Fix the path from which SASL configuration is loaded. (LP: #1878721)
    The bug happened because sasl expects memcached to provide a
    path (i.e., a directory, not a filename) where the sasl
    configuration file(s) is (are). However, memcached was passing
    the filename (/etc/sasl2/memcached.conf) to sasl, which was
    interpreting it as a directory, and looking for a configuration
    file inside it (i.e., /etc/sasl2/memcached.conf/memcached.conf).
    Users could workaround this bug by creating a directory named
    /etc/sasl2/memcached.conf/, and putting the configuration file
    inside it. This patch not only fixes this bug (by passing the
    right directory, /etc/sasl2/, to sasl) but also supports the
    workaround described above.

 -- Anders Kaseorg <email address hidden> Thu, 14 May 2020 17:13:17 -0700