Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 598836 (CVE-2016-8704, CVE-2016-8705, CVE-2016-8706) - <net-misc/memcached-1.4.33: multiple vulnerabilities (CVE-2016-{8704,8705,8706})
Summary: <net-misc/memcached-1.4.33: multiple vulnerabilities (CVE-2016-{8704,8705,8706})
Status: RESOLVED FIXED
Alias: CVE-2016-8704, CVE-2016-8705, CVE-2016-8706
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL: https://github.com/memcached/memcache...
Whiteboard: B2 [glsa cve]
Keywords:
Depends on:
Blocks:
 
Reported: 2016-11-03 10:13 UTC by Agostino Sarubbo
Modified: 2019-10-13 11:14 UTC (History)
2 users (show)

See Also:
Package list:
=net-misc/memcached-1.4.33
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 Matthew Thode ( prometheanfire ) archtester Gentoo Infrastructure gentoo-dev Security 2016-11-03 14:24:17 UTC 
CVE-2016-8704 CVE-2016-8705 CVE-2016-8706
Comment 2 Kristian Fiskerstrand (RETIRED) gentoo-dev 2016-11-03 14:27:26 UTC 
I see the fixed version is already in tree

@maintainers: Please call for stabilization when applicable
Comment 3 Matthew Thode ( prometheanfire ) archtester Gentoo Infrastructure gentoo-dev Security 2016-11-03 14:32:58 UTC 
arches, please stablize =net-misc/memcached-1.4.33

robbat2, others, if I don't get a response I'm going to clean memcached of all releases older than 1.4.33 once it's stable.  Tell me to stop if needed.
Comment 4 Agostino Sarubbo gentoo-dev 2016-11-04 08:22:27 UTC 
amd64 stable
Comment 5 Agostino Sarubbo gentoo-dev 2016-11-04 08:25:44 UTC 
x86 stable
Comment 6 Jeroen Roovers (RETIRED) gentoo-dev 2016-11-04 13:21:30 UTC 
Stable for HPPA PPC64.
Comment 7 Tobias Klausmann (RETIRED) gentoo-dev 2016-11-14 14:54:04 UTC 
Stable on alpha.
Comment 8 Markus Meier gentoo-dev 2016-11-30 19:38:21 UTC 
arm stable
Comment 9 Agostino Sarubbo gentoo-dev 2016-12-19 14:39:07 UTC 
sparc stable
Comment 10 Agostino Sarubbo gentoo-dev 2016-12-19 15:15:39 UTC 
ia64 stable
Comment 11 Agostino Sarubbo gentoo-dev 2016-12-20 09:48:43 UTC 
ppc stable.

Maintainer(s), please cleanup.
Security, please add it to the existing request, or file a new one.
Comment 12 Matthew Thode ( prometheanfire ) archtester Gentoo Infrastructure gentoo-dev Security 2016-12-20 15:30:52 UTC 
cleaned up
Comment 13 GLSAMaker/CVETool Bot gentoo-dev 2017-01-02 14:44:16 UTC 
This issue was resolved and addressed in
 GLSA 201701-12 at https://security.gentoo.org/glsa/201701-12
by GLSA coordinator Thomas Deutschmann (whissi).