rpms/memcached
7
0
Fork 0
Code Issues Pull Requests Releases Activity
High Performance, Distributed Memory Object Cache
13 Commits 8 Branches 20 Tags 262 KiB
c9s
Go to file
RHEL Packaging Agent e99e7308eb Fix CVE-2026-47783: SASL timing side-channel in memcached 
Backport upstream fix for CVE-2026-47783, a timing side-channel
vulnerability in memcached's SASL password database authentication.
The patch modifies sasl_defs.c to zero the buffer before each fgets
call, use constant-time safe_memcmp() for username and password
comparisons, and remove the early loop break so the entire password
file is always scanned.

CVE: CVE-2026-47783
Upstream patches:
 - d13f282b4b.patch
Resolves: RHEL-179094

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-14 13:28:38 +00:00
.fmf RHEL 9.0.0 Alpha bootstrap 2020-10-15 19:33:59 +02:00
tests RHEL 9.0.0 Alpha bootstrap 2020-10-15 19:33:59 +02:00
.gitignore Merged update from upstream sources 2020-11-24 08:03:02 +00:00
ci.fmf Fix testing metadata 2026-06-11 15:04:27 +02:00
gating.yaml Fix testing metadata 2026-06-11 15:04:27 +02:00
memcached-1.6.9-CVE-2026-47783.patch Fix CVE-2026-47783: SASL timing side-channel in memcached 2026-07-14 13:28:38 +00:00
memcached-sigignore.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 19:33:59 +02:00
memcached-unit.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 19:33:59 +02:00
memcached.conf Use systemd-users 2022-06-15 11:00:56 +02:00
memcached.spec Fix CVE-2026-47783: SASL timing side-channel in memcached 2026-07-14 13:28:38 +00:00
memcached.sysconfig RHEL 9.0.0 Alpha bootstrap 2020-10-15 19:33:59 +02:00
plans.fmf Fix testing metadata 2026-06-11 15:04:27 +02:00
sources Merged update from upstream sources 2020-11-24 08:03:02 +00:00