[Bug 1255328] Re: Installing memcached package creates /nonexistent

[Launchpad Bug Tracker]

This bug was fixed in the package memcached - 1.4.14-0ubuntu9

---------------
memcached (1.4.14-0ubuntu9) trusty; urgency=low

  * SECURITY UPDATE: denial of service via large body length
    - debian/patches/CVE-2011-4971.patch: check length in memcached.c,
      added test to t/issue_192.t.
    - CVE-2011-4971
  * SECURITY UPDATE: denial of service when using -vv
    - debian/patches/CVE-2013-0179.patch: properly format key in items.c,
      memcached.c.
    - CVE-2013-0179
  * SECURITY UPDATE: SASL authentication bypass
    - debian/patches/CVE-2013-7239.patch: explicitly record sasl auth
      states in memcached.*, added test to t/binary-sasl.t.
    - CVE-2013-7239
  * debian/memcached.postinst: don't create home directory so we don't end
    up with /nonexistent. Thanks to Dustin Lundquist for patch.
    (LP: #1255328)
 -- Marc Deslauriers <marc.deslauriers at ubuntu.com>   Mon, 13 Jan 2014 15:48:48 -0500

** Changed in: memcached (Ubuntu)
       Status: Confirmed => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-4971

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-0179

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-7239

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to memcached in Ubuntu.
https://bugs.launchpad.net/bugs/1255328

Title:
  Installing memcached package creates /nonexistent

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/memcached/+bug/1255328/+subscriptions