lp:~clint-fewbar/ubuntu/maverick/memcached/run-as-memcache

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp:ubuntu/maverick/memcached

Kees Cook: Approve on 2010-06-30

Diff: 109 lines (+49/-6)

5 files modified

debian/changelog (+8/-0)
debian/control (+1/-0)
debian/memcached.conf (+1/-1)
debian/memcached.postinst (+33/-5)
debian/memcached.postrm (+6/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #599461: memcached runs as nobody instead of its own user

Wishlist

Fix Released

Link a bug report

Related blueprints

15. By Clint Byrum on 2010-06-29

create user in postinst

14. By Clint Byrum on 2010-06-28

depend on adduser for preinst/postrm

13. By Clint Byrum on 2010-06-28

Run as 'memcache' user instead of nobody (LP: #599461)

12. By David Martínez Moreno on 2010-05-12

* New upstream release. Main changes since 1.4.2 are:
  New features:
  - Support for SASL authentication.
  - New script damemtop - a memcached top.
  - Slab optimizations.
  - New stats, for reclaimed memory and SASL events.
  Bugs fixed:
  - Malicious input can crash server (CVE-2010-1152). Closes: #579913.
  - Fixed several problems with slab handling and growth.
  - Provide better error reporting.
  - Fix get stats accounting.
  - Fixed backwards compatibility with delete 0.
  - Documentation fixes.
  - Various build fixes, among others, fixed FTBFS with gcc-4.5 (closes:
    #565033).
* Refreshed and renamed 01_init_script_compliant_with_LSB.patch.
* Fixed lintian warnings by adding $remote_fs to init.d script.
* Removed non-existent document (doc/memory_management.txt).
* debian/control: Bumped Standards-Version to 3.8.4 (no changes).
*

11. By Matt Wheeler on 2010-04-17

added debian/patches/fix-ubuntu-ftbfs.patch
to fix (LP: #565152)

10. By Chuck Short on 2010-04-15

debian/patches/fix-issue-102-segfault.patch: Update patch with a more
propper fix. (LP: #558328)

9. By Chuck Short on 2010-04-08

debian/patches/fix-issue-102-segfault.patch: Fix segfault when client is
sending bad data (LP: #558328)

8. By David Martínez Moreno on 2009-10-16

* New upstream release, primarily bugfixes, some of them critical, hence
  the urgency:
  - Reject keys larger than 250 bytes in the binary protocol.
  - Bounds checking on stats cachedump.
  - Binary protocol set+cas wasn't returning a new cas ID.
  - Binary quitq didn't actually close the connection
  - Slab boundary checking cleanup (bad logic in unreachable code)
  - Get hit memory optimizations
  - Disallow -t options that cause the server to not work
  - Killed off incomplete slab rebalance feature.
* debian/patches:
  - 01_init_script_compliant_with_LSB.patch: Remade as upstream applied a
    whitespace cleanup script that broke the patch.
  - 02_manpage_additions.patch: Added missing parameters to the memcached
    manpage.
* Removed TODO from debian/docs.

7. By David Martínez Moreno on 2009-05-02

* New upstream release, urgency=high because of two critical bugs prior
  to this release:
  - In 1.2.7 under multithreaded mode, memcached would never restart
    accepting connections after hitting the maximum connection limit.
  - Remove 'stats maps' command, as it is a potential information leak,
    usable if versions prior to 1.2.8 ever have buffer overflows discovered
    (CVE-2009-1494). Closes: #526554.
  - Make -b command (setting the TCP listen backlog) actually work.
* debian/rules: Removed obsolete --disable-static.

6. By David Martínez Moreno on 2009-02-27

* New upstream release, released on 3/2/2008:
  - Minor bugfixes.
  - Added support for Opensolaris.
  - IPv6 support.
  - "noreply" mode for many commands.
  - Made "out of memory· errors more clear.
  - Added eviction/OOM tracking per slab class.