ALT-PU-2026-8121

Высокий

ALT-PU-2026-8121: package memcached update to version 1.6.42-alt1

Источник

errata.altlinux.org

Дата публикации

22.05.2026

Дата обновления

22.05.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades memcached to version 1.6.42-alt1.

Устраненные уязвимости2

CVE-2026-47783

Высокий 8.1

Дата публикации: 20.05.2026

CWE-208

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.

CVSS 3.1

Высокий 8.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: High
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Ссылки

CVE-2026-47783 https://nvd.nist.gov/vuln/detail/CVE-2026-47783

Ссылки1

ALT-PU-2026-8121 https://errata.altlinux.org/ALT-PU-2026-8121

Связанные уязвимости

openSUSE-SU-2026:20884-1

suse-cvrf

5 месяцев назад

Security update for memcached

SUSE-SU-2026:2293-1

suse-cvrf

5 месяцев назад

Security update for memcached

SUSE-SU-2026:2292-1

suse-cvrf

5 месяцев назад

Security update for memcached

CVE-2026-47784

CVSS3: 8.1

ubuntu

6 месяцев назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

CVE-2026-47784

CVSS3: 5.9

redhat

6 месяцев назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.