[IT-SecNots] [SECURITY] [DSA 3704-1] memcached security update

[Salvatore Bonaccorso <carnil AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3704-1                   security AT debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
November 03, 2016                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : memcached
CVE ID         : CVE-2016-8704 CVE-2016-8705 CVE-2016-8706
Debian Bug     : 842811 842812 842814

Aleksandar Nikolic of Cisco Talos discovered several integer overflow
vulnerabilities in memcached, a high-performance memory object caching
system. A remote attacker can take advantage of these flaws to cause a
denial of service (daemon crash), or potentially to execute arbitrary
code.

For the stable distribution (jessie), these problems have been fixed in
version 1.4.21-1.1+deb8u1.

We recommend that you upgrade your memcached packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQJ8BAEBCgBmBQJYG2EHXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ0NjQ0NDA5ODA4QzE3MUUwNTUzMURERUUw
NTRDQjhGMzEzNDNDRjQ0AAoJEAVMuPMTQ89EQJYQAISgPxtvSaIrF8h2cydS03Ix
9lh8A7t8+YVVXBsfaF8M+AIVoYjIpAI1WKJDHEOLfdUZwf7BKiDdkr5L9Oc94sgN
tUg4NPDM88BdKDxDgcD9GVXwnM40ZE0bWYtEURxrgt8LtitOPXQCIkQsTEcp3Gkb
IxRAasJAuad1pX2R3+RmLXf0QnRi77RIUrQMZSMsLnEXGB1yD6Wsmzd6HtuE4e5m
LMbEo8/xNoNmJFYt2ezZYoYDRqoAvGBcBgaPQsi+zoWo8TCB4coK5J5Cz0N5UhDq
0CkP33gOhdko+VZb771ck/V2Opqlm/YdGdNJ7pxICINOs074ochVFz11NsWQmfRD
0JGSCFitsbkigGLEuC9P5Zyn5zKDC6o1XvqrI+eQeqbiGxS8zUDSymL+VUWVnsc1
co6TKcgmAA5djBixlQrtkkMWru6uxBqs/7tiJU7j8Z3QTbi8b+X4moEOF9OX2LWT
jzg0E7l3jujgSdkjjfX7gPl03SxqrRfxiWbdsYXiWAQlkzFT/Uhvo5kHF6gLMUmX
XkfsaTRVw9obbtdEq9OXLjQEUkFDDKyfly3aS4WMHZFV87IV16h7Jds4iIdE6Vwv
WEMC9gAo0koFLB1C3AbjN/vpRDxPPNZid+RKNKv/PYZDMMAd9uRNv+itkIg5Dd1z
BbRGrPSfuPtZ4Y7bGF7c
=gl5N
-----END PGP SIGNATURE-----