All errata/c9f2/ALT-PU-2026-8119-2
ALT-PU-2026-8119-2

Package update memcached in branch c9f2

Version1.6.42-alt1
Task#418738
Published2026-05-22
Max severityHIGH
Severity:

Closed issues (2)

CVE-2026-47783
HIGH8.1

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.

Published: 2026-05-20Modified: 2026-05-21
CVSS 3.xHIGH 8.1
CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
CVE-2026-47784
HIGH8.1

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

Published: 2026-05-20Modified: 2026-05-21
CVSS 3.xHIGH 8.1
CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References