[ubuntu/zesty-proposed] memcached 1.4.25-2ubuntu3 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Wed Nov 2 13:59:15 UTC 2016


memcached (1.4.25-2ubuntu3) zesty; urgency=medium

  * SECURITY UPDATE: multiple integer overflow vulnerabilities
    - debian/patches/CVE-2016-870x.patch: check nbytes and nkey in items.c,
      properly handle lengths in memcached.c.
    - CVE-2016-8704
    - CVE-2016-8705
    - CVE-2016-8706

Date: Wed, 02 Nov 2016 08:05:05 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/memcached/1.4.25-2ubuntu3
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 02 Nov 2016 08:05:05 -0400
Source: memcached
Binary: memcached
Architecture: source
Version: 1.4.25-2ubuntu3
Distribution: zesty
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 memcached  - high-performance memory object caching system
Changes:
 memcached (1.4.25-2ubuntu3) zesty; urgency=medium
 .
   * SECURITY UPDATE: multiple integer overflow vulnerabilities
     - debian/patches/CVE-2016-870x.patch: check nbytes and nkey in items.c,
       properly handle lengths in memcached.c.
     - CVE-2016-8704
     - CVE-2016-8705
     - CVE-2016-8706
Checksums-Sha1:
 cead216f0d3244959bca24d227287dcd4cf033fa 2113 memcached_1.4.25-2ubuntu3.dsc
 85d316e8aba2e5151a1235b2322dbfe5a92735cc 19188 memcached_1.4.25-2ubuntu3.debian.tar.xz
Checksums-Sha256:
 98d1f6de08c1e320b4d04765ff7d5edcd4d50b9d2ee04233e9098f35c6da5be0 2113 memcached_1.4.25-2ubuntu3.dsc
 dd81ff807df0435392091bdfa9cfbad9db60fc92ef1f0c1152896101471a95c7 19188 memcached_1.4.25-2ubuntu3.debian.tar.xz
Files:
 f204b01f5f2b22794b37833f07e652fa 2113 web optional memcached_1.4.25-2ubuntu3.dsc
 70ac4e1c7858d32a8b63cec75ba40c0a 19188 web optional memcached_1.4.25-2ubuntu3.debian.tar.xz
Original-Maintainer: David Martínez Moreno <ender at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=k5gc
-----END PGP SIGNATURE-----


More information about the Zesty-changes mailing list