rpms/memcached
7
0
Fork 0
Code Issues Pull Requests Releases Activity
High Performance, Distributed Memory Object Cache
219 Commits 8 Branches 20 Tags 262 KiB
c10s
Go to file
RHEL Packaging Agent fb919d63be Fix CVE-2026-47783: SASL timing side-channel in memcached 
Backport upstream commit d13f282b4bce to fix CVE-2026-47783,
a timing side-channel vulnerability in SASL password database
authentication. The patch uses constant-time safe_memcmp() for
username and password comparisons, zero-fills the buffer before
each fgets call, and removes the early break to ensure the
entire password file is always scanned, eliminating measurable
timing differences between valid and invalid usernames.

CVE: CVE-2026-47783
Upstream patches:
 - d13f282b4b.patch
Resolves: RHEL-179085

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-14 13:28:26 +00:00
.fmf Enable testing of memcached in Fedora 2020-06-30 09:29:07 +02:00
.gitignore Update to 1.6.23 2024-01-20 17:04:38 +01:00
ci.fmf update plans 2024-06-19 19:57:06 +02:00
gating.yaml update plans 2024-06-19 19:57:06 +02:00
memcached-1.6.23-CVE-2026-47783.patch Fix CVE-2026-47783: SASL timing side-channel in memcached 2026-07-14 13:28:26 +00:00
memcached-unit.patch use upstream unit file (#1350939) 2016-07-12 15:48:40 +02:00
memcached.conf Resolves: rhbz#2096850 2022-06-14 15:56:05 +02:00
memcached.spec Fix CVE-2026-47783: SASL timing side-channel in memcached 2026-07-14 13:28:26 +00:00
memcached.sysconfig listen only on loopback interface by default (#1182542) 2016-07-12 15:48:40 +02:00
plans.fmf https://issues.redhat.com/browse/RHELMISC-13073 2025-06-05 12:18:31 +02:00
sources Update to 1.6.23 2024-01-20 17:04:38 +01:00