Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
eca61a13 by Salvatore Bonaccorso at 2026-09-27T13:29:19+02:00
Remove not-affected status for trixie from CVE-2026-90698
We still have not yet a defitnive assment. Additionally Ubuntu has fixed
the issue for older versions.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -19535,11 +19535,10 @@ CVE-2026-90699 (A weakness has been identified in
D-Link DWR-M920 1.1.7. This is
NOT-FOR-US: D-Link
CVE-2026-90698 (A security flaw has been discovered in memcached
1.6.41/1.6.42/1.6.43. ...)
- memcached 1.6.45-1
- [trixie] - memcached <not-affected> (Vulnerable code not present)
[bookworm] - memcached <not-affected> (Vulnerable code not present)
NOTE: https://protectiv.ph/research/memcached-asciiauth-empty-line-dos
NOTE: protocol processing code deduplication done in:
https://github.com/memcached/memcached/commit/778cfd6e56a276f69bdd1c4c7725c977147aee47
(1.6.40)
- NOTE: Introduced with:
https://github.com/memcached/memcached/commit/591fba966837b2f3398ccf7b5fe3886ac19e9e20
(1.6.41)
+ NOTE: Further refactoring with:
https://github.com/memcached/memcached/commit/591fba966837b2f3398ccf7b5fe3886ac19e9e20
(1.6.41)
NOTE: Requisite:
https://github.com/memcached/memcached/commit/9981d748f866e80a8f2ee1b12bf45717f9595df9
(1.6.42)
NOTE: Fixed by:
https://github.com/memcached/memcached/commit/af05c9302bba508b736c3da1d5670f63fe8b7db4
(1.6.44)
NOTE: Followup:
https://github.com/memcached/memcached/commit/e8364b58b193e42b7db9db8506471a1efe74ab6d
(1.6.45)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eca61a13260046d8a5157cb6d8491d35892ae493
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eca61a13260046d8a5157cb6d8491d35892ae493
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
