Synopsis

Moderate: memcached security update

Type/Severity

Security Advisory: Moderate

Topic

An update for memcached is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load.

Security Fix(es):

• memcached: null-pointer dereference in "lru mode" and "lru temp_ttl" causing denial of service (CVE-2019-11596)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

• BZ - 1706001 - CVE-2019-11596 memcached: null-pointer dereference in "lru mode" and "lru temp_ttl" causing denial of service

CVEs

• CVE-2019-11596

References

• https://access.redhat.com/security/updates/classification/#moderate
• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index

Red Hat Enterprise Linux for x86_64 8

SRPM
memcached-1.5.9-3.el8.src.rpm	SHA-256: 492f4dab43f9c5f96ceb3d7f50b4e77bef456519d51be72299664448c6c79894
x86_64
memcached-1.5.9-3.el8.x86_64.rpm	SHA-256: e021c9b10c1eaead3c9cc1f0fd877581780a477e78ba2e12a4bcc3e9f74a6e4c
memcached-debuginfo-1.5.9-3.el8.x86_64.rpm	SHA-256: 2414ed45f4368f64d63f6eb16642a8edd73497d2f789eb25b2ba2febb7a0cff0
memcached-debugsource-1.5.9-3.el8.x86_64.rpm	SHA-256: 9abb720d1c409674e7f832d5c7b1cf57a18cfde52a516d19b3a760823ce3c922

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
memcached-1.5.9-3.el8.src.rpm	SHA-256: 492f4dab43f9c5f96ceb3d7f50b4e77bef456519d51be72299664448c6c79894
s390x
memcached-1.5.9-3.el8.s390x.rpm	SHA-256: 4ac7b26aeec8a9e7159f0d6ad140ec5a73eff200863270c19aab09d4abc7b3ed
memcached-debuginfo-1.5.9-3.el8.s390x.rpm	SHA-256: 0c3cb49eacb18880df636016d4783815c0b60dcfe612ed8833d7563137091747
memcached-debugsource-1.5.9-3.el8.s390x.rpm	SHA-256: 15a3491dbb4f1287db44897fc1f2e5af02b19f916681131714252e75898db9ad

Red Hat Enterprise Linux for Power, little endian 8

SRPM
memcached-1.5.9-3.el8.src.rpm	SHA-256: 492f4dab43f9c5f96ceb3d7f50b4e77bef456519d51be72299664448c6c79894
ppc64le
memcached-1.5.9-3.el8.ppc64le.rpm	SHA-256: 47ddadcf8c375a739306087209f34fcf1e83aef891d9dc00a8dae5c5004e2410
memcached-debuginfo-1.5.9-3.el8.ppc64le.rpm	SHA-256: 2a3516aa8715c3ca1ca7296f85c1abb3a95ce323f052f77ad8936fb71caef92d
memcached-debugsource-1.5.9-3.el8.ppc64le.rpm	SHA-256: 3096e695d09b3a9f3b18016008fd8e05351c25f155c983db65d9f8aa866cbc55

Red Hat Enterprise Linux for ARM 64 8

SRPM
memcached-1.5.9-3.el8.src.rpm	SHA-256: 492f4dab43f9c5f96ceb3d7f50b4e77bef456519d51be72299664448c6c79894
aarch64
memcached-1.5.9-3.el8.aarch64.rpm	SHA-256: e8755e54ff0be128d1e5e237765ac1d119facfe3f0c72417df6ce1f827ad3a8e
memcached-debuginfo-1.5.9-3.el8.aarch64.rpm	SHA-256: 08ffc398b6735fb6922f327e0834f13cf95b27c4eddb3eee8819e7d256420de7
memcached-debugsource-1.5.9-3.el8.aarch64.rpm	SHA-256: a3d963e208f7c761233c837f1c36e236859849c67ef92061c7722f0443be879e