UbuntuUpdates.org

Package "memcached"

Name: memcached

Description:

A high-performance memory object caching system
Latest version: 1.4.14-0ubuntu9.3
Release: trusty (14.04)
Level: updates
Repository: main
Homepage: http://www.danga.com/memcached/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "memcached"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "memcached" in Trusty

Repository Area Version
base main 1.4.14-0ubuntu9
security main 1.4.14-0ubuntu9.3

Changelog

Version: 1.4.14-0ubuntu9.3 2018-03-19 22:06:37 UTC

  memcached (1.4.14-0ubuntu9.3) trusty-security; urgency=medium

  * SECURITY UPDATE: Integer Overflow in items.c:item_free()
    - debian/patches/CVE-2018-1000127.patch: Don't overflow item refcount
      on get in memcached.c.
    - CVE-2018-1000127

 -- Marc Deslauriers <email address hidden> Mon, 19 Mar 2018 10:15:57 -0400
Source diff to previous version

Version: 1.4.14-0ubuntu9.2 2018-03-05 17:06:53 UTC

  memcached (1.4.14-0ubuntu9.2) trusty-security; urgency=medium

  * SECURITY UPDATE: denial of service due to integer overflow
    - debian/patches/CVE-2017-9951.patch: check for integer overflow on
      key requests
    - CVE-2017-9951
  * SECURITY UPDATE: disable listening on UDP port by default due to
    use in DDoS amplification attacks
    - debian/patches/disable-udp-by-default.patch: disable UDP port by
      default. (LP: #1752831)
    - debian/NEWS: add explanation and document how to re-enable UDP if
      necessary.
    - CVE-2018-1000115

 -- Steve Beattie <email address hidden> Mon, 05 Mar 2018 02:10:59 -0800
Source diff to previous version
1752831 memcached should disable UDP by default
CVE-2017-9951 The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via

Version: 1.4.14-0ubuntu9.1 2016-11-03 03:06:37 UTC

  memcached (1.4.14-0ubuntu9.1) trusty-security; urgency=medium

  * SECURITY UPDATE: multiple integer overflow vulnerabilities
    - debian/patches/CVE-2016-870x.patch: check nbytes and nkey in items.c,
      properly handle lengths in memcached.c.
    - CVE-2016-8704
    - CVE-2016-8705
    - CVE-2016-8706

 -- Marc Deslauriers <email address hidden> Wed, 02 Nov 2016 08:17:58 -0400


About   -   Send Feedback to @ubuntu_updates