Path to this page:
Subject: CVS commit: pkgsrc/devel/memcached
From: Adam Ciarcinski
Date: 2020-10-27 11:24:55
Message id: 20201027102455.F0547FB28@cvs.NetBSD.org
Log Message:
memcached: updated to 1.6.8
Memcached 1.6.8
Small security related release. A remote crash is possible if UDP is enabled. \
The remediation is to upgrade or disable UDP. The crash was introduced in the \
1.6 series.
UDP has not been enabled by default for years and it has no authentication or \
security, so it most users should not have a high exposure to this bug.
This also includes two minor fixes.
Fixes
* Improve opening of authentication file
* Fix over-freeing in internal object cache
* udp: crash fix when receiving multi-packet uploads
Files: