An update for memcached is now available for Red Hat Enterprise Linux 6.Red Hat Product Security has rated this update as having a security impact ofImportant. A Common Vulnerability Scoring System (CVSS) base score, which givesa detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.
memcached is a high-performance, distributed memory object caching system,generic in nature, but intended for use in speeding up dynamic web applicationsby alleviating database load.Security Fix(es):* Two integer overflow flaws, leading to heap-based buffer overflows, were foundin the memcached binary protocol. An attacker could create a specially craftedmessage that would cause the memcached server to crash or, potentially, executearbitrary code. (CVE-2016-8704, CVE-2016-8705)
Red Hat Enterprise Linux Desktop (v. 6)

SRPMS:
memcached-1.4.4-3.el6_8.1.src.rpm
    MD5: 4757153b08041950e83aad15ca1a9859SHA-256: 72bfdc81f71f422cb9f33ff0ccdb11f3adb74380a3ff4bd56a613da99827f899
 
IA-32:
memcached-1.4.4-3.el6_8.1.i686.rpm
    MD5: 5a2bbcdecec89b81edafec59d633a97bSHA-256: 6eb48e7ef95aa5d4361ef00dc62cc581eba9f460514b16f5d4ef838e0894675a
memcached-debuginfo-1.4.4-3.el6_8.1.i686.rpm
    MD5: ad39fef61cd62ac28450880af95181a7SHA-256: efe00866ceaa19eb7a57bbc690fc496f3e2edfc6feb55a4402cefa9f86d10fb4
memcached-devel-1.4.4-3.el6_8.1.i686.rpm
    MD5: 76d80fa3bb60a6f320e043ca83cdeca6SHA-256: b770ca904ffc28707eb7d0d64e9591632cb521128fd17137c0cca7db92a0011c
 
x86_64:
memcached-1.4.4-3.el6_8.1.x86_64.rpm
    MD5: efc63f439c77f3abf03c9daf3c4d0a1eSHA-256: 3f065adf2f19596092dbaaf2f8a764c5d0870c4afc85cb8766fd0234c0c78bbc
memcached-debuginfo-1.4.4-3.el6_8.1.i686.rpm
    MD5: ad39fef61cd62ac28450880af95181a7SHA-256: efe00866ceaa19eb7a57bbc690fc496f3e2edfc6feb55a4402cefa9f86d10fb4
memcached-debuginfo-1.4.4-3.el6_8.1.x86_64.rpm
    MD5: 302c716d94d2eaa92f5a3f6cf1d17c55SHA-256: 457bbf8d1e6c69a02e5f27febe2e8ed88ddf1ed72ccff391f331812f46a73f67
memcached-devel-1.4.4-3.el6_8.1.i686.rpm
    MD5: 76d80fa3bb60a6f320e043ca83cdeca6SHA-256: b770ca904ffc28707eb7d0d64e9591632cb521128fd17137c0cca7db92a0011c
memcached-devel-1.4.4-3.el6_8.1.x86_64.rpm
    MD5: 0ca042bbbe958b2681d0afd06eb126ecSHA-256: 35be89cb34dff48dd77d62365869c0c341d312fb8ad9c33849f86803986c2c59
 
Red Hat Enterprise Linux HPC Node (v. 6)

SRPMS:
memcached-1.4.4-3.el6_8.1.src.rpm
    MD5: 4757153b08041950e83aad15ca1a9859SHA-256: 72bfdc81f71f422cb9f33ff0ccdb11f3adb74380a3ff4bd56a613da99827f899
 
x86_64:
memcached-1.4.4-3.el6_8.1.x86_64.rpm
    MD5: efc63f439c77f3abf03c9daf3c4d0a1eSHA-256: 3f065adf2f19596092dbaaf2f8a764c5d0870c4afc85cb8766fd0234c0c78bbc
memcached-debuginfo-1.4.4-3.el6_8.1.i686.rpm
    MD5: ad39fef61cd62ac28450880af95181a7SHA-256: efe00866ceaa19eb7a57bbc690fc496f3e2edfc6feb55a4402cefa9f86d10fb4
memcached-debuginfo-1.4.4-3.el6_8.1.x86_64.rpm
    MD5: 302c716d94d2eaa92f5a3f6cf1d17c55SHA-256: 457bbf8d1e6c69a02e5f27febe2e8ed88ddf1ed72ccff391f331812f46a73f67
memcached-devel-1.4.4-3.el6_8.1.i686.rpm
    MD5: 76d80fa3bb60a6f320e043ca83cdeca6SHA-256: b770ca904ffc28707eb7d0d64e9591632cb521128fd17137c0cca7db92a0011c
memcached-devel-1.4.4-3.el6_8.1.x86_64.rpm
    MD5: 0ca042bbbe958b2681d0afd06eb126ecSHA-256: 35be89cb34dff48dd77d62365869c0c341d312fb8ad9c33849f86803986c2c59
 
Red Hat Enterprise Linux Server (v. 6)

SRPMS:
memcached-1.4.4-3.el6_8.1.src.rpm
    MD5: 4757153b08041950e83aad15ca1a9859SHA-256: 72bfdc81f71f422cb9f33ff0ccdb11f3adb74380a3ff4bd56a613da99827f899
 
IA-32:
memcached-1.4.4-3.el6_8.1.i686.rpm
    MD5: 5a2bbcdecec89b81edafec59d633a97bSHA-256: 6eb48e7ef95aa5d4361ef00dc62cc581eba9f460514b16f5d4ef838e0894675a
memcached-debuginfo-1.4.4-3.el6_8.1.i686.rpm
    MD5: ad39fef61cd62ac28450880af95181a7SHA-256: efe00866ceaa19eb7a57bbc690fc496f3e2edfc6feb55a4402cefa9f86d10fb4
memcached-devel-1.4.4-3.el6_8.1.i686.rpm
    MD5: 76d80fa3bb60a6f320e043ca83cdeca6SHA-256: b770ca904ffc28707eb7d0d64e9591632cb521128fd17137c0cca7db92a0011c
 
PPC:
memcached-1.4.4-3.el6_8.1.ppc64.rpm
    MD5: c8186b50e36a7a4d5311452d1270e792SHA-256: c7bf10db1e72d8e85b7fc55598a5ef42da1c85b479549771ce3836d5e3cfed64
memcached-debuginfo-1.4.4-3.el6_8.1.ppc.rpm
    MD5: 830ae645ee894cdfbae972e271215c7dSHA-256: 023a883cb0456ca03ea27216caba22ba85bbf468a6c3ff98512056074da53121
memcached-debuginfo-1.4.4-3.el6_8.1.ppc64.rpm
    MD5: 2d7673a6135cde3423a4988302b218b5SHA-256: 6cbd0f263b9994e5d0681514a972380e07c0463ac3f617fde5bd49e7d3670169
memcached-devel-1.4.4-3.el6_8.1.ppc.rpm
    MD5: f481dab9594d7b96b34caadd9c6d337aSHA-256: ca3b58519c9e3a0af1ffef802280e301734160fce05e7e6ea6d7eb649578d5a1
memcached-devel-1.4.4-3.el6_8.1.ppc64.rpm
    MD5: a95afaa7f813c364a898b70d2a8dec11SHA-256: 1ba5fbe366332c29456ab3b576e8852d06a656f046455566e036579fb2c8794e
 
s390x:
memcached-1.4.4-3.el6_8.1.s390x.rpm
    MD5: 49635c04bb0a120e78b73ced400a1708SHA-256: f6b0c7445995acd2926186314c90de5c36399f1da0db5244cd92eb80383c17b8
memcached-debuginfo-1.4.4-3.el6_8.1.s390.rpm
    MD5: bbc47e0116b4709bd2792c921b69a991SHA-256: 74f401b58c769747841d8b15c9d1f7d91f74d1dad0210f6b5464505242b194bd
memcached-debuginfo-1.4.4-3.el6_8.1.s390x.rpm
    MD5: cb08f348ee9d0857430c4692737dbd22SHA-256: d4153d0f1ea9b13d2efc7d0c995ffd448b06d41a03162bea082cd48745e5696f
memcached-devel-1.4.4-3.el6_8.1.s390.rpm
    MD5: 35bc6366f99657ff754845f093c9486fSHA-256: 43e94587dc41ed96980cc4ccdfc4e190c101016af9e32b8dedf46b6d6ba10596
memcached-devel-1.4.4-3.el6_8.1.s390x.rpm
    MD5: 9720beddf7f91d66755f425254ca617eSHA-256: 090e982814cc66a2bab81d45d882e75ed82e56e882549ca862526c776188216e
 
x86_64:
memcached-1.4.4-3.el6_8.1.x86_64.rpm
    MD5: efc63f439c77f3abf03c9daf3c4d0a1eSHA-256: 3f065adf2f19596092dbaaf2f8a764c5d0870c4afc85cb8766fd0234c0c78bbc
memcached-debuginfo-1.4.4-3.el6_8.1.i686.rpm
    MD5: ad39fef61cd62ac28450880af95181a7SHA-256: efe00866ceaa19eb7a57bbc690fc496f3e2edfc6feb55a4402cefa9f86d10fb4
memcached-debuginfo-1.4.4-3.el6_8.1.x86_64.rpm
    MD5: 302c716d94d2eaa92f5a3f6cf1d17c55SHA-256: 457bbf8d1e6c69a02e5f27febe2e8ed88ddf1ed72ccff391f331812f46a73f67
memcached-devel-1.4.4-3.el6_8.1.i686.rpm
    MD5: 76d80fa3bb60a6f320e043ca83cdeca6SHA-256: b770ca904ffc28707eb7d0d64e9591632cb521128fd17137c0cca7db92a0011c
memcached-devel-1.4.4-3.el6_8.1.x86_64.rpm
    MD5: 0ca042bbbe958b2681d0afd06eb126ecSHA-256: 35be89cb34dff48dd77d62365869c0c341d312fb8ad9c33849f86803986c2c59
 
Red Hat Enterprise Linux Workstation (v. 6)

SRPMS:
memcached-1.4.4-3.el6_8.1.src.rpm
    MD5: 4757153b08041950e83aad15ca1a9859SHA-256: 72bfdc81f71f422cb9f33ff0ccdb11f3adb74380a3ff4bd56a613da99827f899
 
IA-32:
memcached-1.4.4-3.el6_8.1.i686.rpm
    MD5: 5a2bbcdecec89b81edafec59d633a97bSHA-256: 6eb48e7ef95aa5d4361ef00dc62cc581eba9f460514b16f5d4ef838e0894675a
memcached-debuginfo-1.4.4-3.el6_8.1.i686.rpm
    MD5: ad39fef61cd62ac28450880af95181a7SHA-256: efe00866ceaa19eb7a57bbc690fc496f3e2edfc6feb55a4402cefa9f86d10fb4
memcached-devel-1.4.4-3.el6_8.1.i686.rpm
    MD5: 76d80fa3bb60a6f320e043ca83cdeca6SHA-256: b770ca904ffc28707eb7d0d64e9591632cb521128fd17137c0cca7db92a0011c
 
x86_64:
memcached-1.4.4-3.el6_8.1.x86_64.rpm
    MD5: efc63f439c77f3abf03c9daf3c4d0a1eSHA-256: 3f065adf2f19596092dbaaf2f8a764c5d0870c4afc85cb8766fd0234c0c78bbc
memcached-debuginfo-1.4.4-3.el6_8.1.i686.rpm
    MD5: ad39fef61cd62ac28450880af95181a7SHA-256: efe00866ceaa19eb7a57bbc690fc496f3e2edfc6feb55a4402cefa9f86d10fb4
memcached-debuginfo-1.4.4-3.el6_8.1.x86_64.rpm
    MD5: 302c716d94d2eaa92f5a3f6cf1d17c55SHA-256: 457bbf8d1e6c69a02e5f27febe2e8ed88ddf1ed72ccff391f331812f46a73f67
memcached-devel-1.4.4-3.el6_8.1.i686.rpm
    MD5: 76d80fa3bb60a6f320e043ca83cdeca6SHA-256: b770ca904ffc28707eb7d0d64e9591632cb521128fd17137c0cca7db92a0011c
memcached-devel-1.4.4-3.el6_8.1.x86_64.rpm
    MD5: 0ca042bbbe958b2681d0afd06eb126ecSHA-256: 35be89cb34dff48dd77d62365869c0c341d312fb8ad9c33849f86803986c2c59
 
(The unlinked packages above are only available from the Red Hat Network)

1390510 – CVE-2016-8704 memcached: Server append/prepend remote code execution1390511 – CVE-2016-8705 memcached: Server update remote code execution

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:

Leave a Reply