[ubuntu/resolute-security] memcached 1.6.40-1ubuntu0.2 (Accepted)

[Bruce Cable]

memcached (1.6.40-1ubuntu0.2) resolute-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds heap write in the LRU crawler dump path
    when an idle client stalls reading a dump (LP: #2161693):
    - debian/patches/lp2161693-0-fix-lru-crawler-buffer-overflow-on-idle-client.patch:
      backport 7eeac6e9, retry on poll() timeout instead of a false flush.
    - debian/patches/lp2161693-1-fix-lru-crawler-unlock-of-unlocked-mutex.patch:
      backport ea35f44, lock lru_locks[i] before lru_crawler_class_done().

Date: 2026-08-31 05:32:24.444211+00:00
Changed-By: Seyeong Kim <seyeong.kim at canonical.com>
Signed-By: Bruce Cable <bruce.cable at canonical.com>
https://launchpad.net/ubuntu/+source/memcached/1.6.40-1ubuntu0.2
-------------- next part --------------
Sorry, changesfile not available.