~sergiodj/ubuntu/+source/memcached:sasl-configuration-wrong-path-bug1878721-eoan

Last commit made on 2020-06-03
Get this branch:
git clone -b sasl-configuration-wrong-path-bug1878721-eoan https://git.launchpad.net/~sergiodj/ubuntu/+source/memcached
Only Sergio Durigan Junior can upload to this branch. If you are Sergio Durigan Junior please log in for upload directions.

Branch merges

Branch information

Name:
sasl-configuration-wrong-path-bug1878721-eoan
Repository:
lp:~sergiodj/ubuntu/+source/memcached

Recent commits

e56ed46... by Sergio Durigan Junior

Update changelog for 1.5.10-0ubuntu3.1.

b6e9815... by Sergio Durigan Junior

  * d/p/fix-bug-where-sasl-will-load-config-the-wrong-path.patch:
    Fix the path from which SASL configuration is loaded. (LP: #1878721)
    The bug happened because sasl expects memcached to provide a
    path (i.e., a directory, not a filename) where the sasl
    configuration file(s) is (are). However, memcached was passing
    the filename (/etc/sasl2/memcached.conf) to sasl, which was
    interpreting it as a directory, and looking for a configuration
    file inside it (i.e., /etc/sasl2/memcached.conf/memcached.conf).
    Users could workaround this bug by creating a directory named
    /etc/sasl2/memcached.conf/, and putting the configuration file
    inside it. This patch not only fixes this bug (by passing the
    right directory, /etc/sasl2/, to sasl) but also supports the
    workaround described above.

4237c67... by Leonidas S. Barbosa

Import patches-unapplied version 1.5.10-0ubuntu3 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 6c2370a59028ead999ac7bd177ec57938d3a9368

New changelog entries:
  * SECURITY UPDATE: stack-based buffer over-read
    - debian/patches/CVE-2019-15026.patch: fix strncpy call to
      avoid ASAN violation in memcached.c.
    - CVE-2019-15026

6c2370a... by Marc Deslauriers

Import patches-unapplied version 1.5.10-0ubuntu2 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 6977a63dd4f9ed9672373d946f40b82052885069

New changelog entries:
  * SECURITY UPDATE: denial of service via crafted lru messages
    - debian/patches/CVE-2019-11596.patch: fix off by one in token count in
      memcached.c.
    - CVE-2019-11596

6977a63... by Robie Basak

Import patches-unapplied version 1.5.10-0ubuntu1 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Upload parent: 9ba771d1da47c3e845509007747f1ce9a3cae1f4

9ba771d... by Robie Basak

Tweak changelog following review feedback

05743dd... by Robie Basak

update-maintainer

1021c03... by Robie Basak

Changelog for 1.5.10-0ubuntu1

e6be475... by Robie Basak

Update to new upstream 1.5.10

95243ae... by Guillaume Delacour

Import patches-unapplied version 1.5.6-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: f1a7050c2631d74876509f87ddd6f017cdb6ac13

New changelog entries:
  * New upstream release
    + Fix CVE-2018-1000115 (UDP is no more enabled by default)
    + Update debian/patches/02_service_wrapper.patch
    + Update debian/tests/client.pl to verify that UDP is disabled by default
  * Remove generated debian/memcached.service
  * Bumped policy version to 4.1.3