Ubuntu alert USN-8320-1 (memcached)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8320-1] Memcached vulnerabilities
Date:
             
 
Wed, 27 May 2026 13:37:56 +0000
Message-ID:
             
 
<E1wSESK-0005kZ-Du@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8320-1
May 27, 2026

memcached vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Memcached could be made to expose sensitive information over the network.

Software Description:
- memcached: High-performance in-memory object caching system

Details:

It was discovered that Memcached's SASL password database authentication
had a timing side channel when handling username and password data. A
remote attacker could possibly use this issue to obtain sensitive
information.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  memcached                       1.6.40-1ubuntu0.1

Ubuntu 25.10
  memcached                       1.6.38-1ubuntu0.1

Ubuntu 24.04 LTS
  memcached                       1.6.24-1ubuntu0.1

Ubuntu 22.04 LTS
  memcached                       1.6.14-1ubuntu0.2

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8320-1
  CVE-2026-47783, CVE-2026-47784

Package Information:
  https://launchpad.net/ubuntu/+source/memcached/1.6.40-1ub...
  https://launchpad.net/ubuntu/+source/memcached/1.6.38-1ub...
  https://launchpad.net/ubuntu/+source/memcached/1.6.24-1ub...
  https://launchpad.net/ubuntu/+source/memcached/1.6.14-1ub...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmoW8ywACgkQcpJm3tlz
hgE1ZxAAqtQJqUz3Tn9ukVfxYgV68EhvJ/3wgPheYhxHLbVwG/SUmXKm5e57rvc3
daO8wXufh+QmzIwY5+kP0ShrduMyK5YrL7NarHPl+hrqJdYhgR3hO7jQqEmuJrvq
CDu7i+xo3Juf6QXb+ATPBUM+w3JnJq/KLFX9fzul8tuPopO8j5RbGYYskIubbwDS
yM2xfEHa+JmI+QtlZfwl7jKSg5YZV7E/2JNReF415x6UhJC0wxw6x6/hlod+jVGq
UYUKru9HBooSI8yT+P0h6wflV8zpS9aaaH47k5W7GqLwhUuwD7W9BbMxQa3AiOSK
0M498BROEh8tySu/obC0PjnXlelcfsKIxdxUIeiSQyzzla0NlVloWEQToSdGtJNK
mhB5zsrKsIfD4+A9SqV2ODNLfaXmWYt9of4DsZ6vEAHuFIC825+Uv1mRBNXtGsuU
lNyFxOZKI4rP0tI2+7FOfk330jB9pCrsTHOHCYNqAdSOugvfMvYes4pLDWtJUgOA
XhUGnRgnLJbJcdx6528QJhz5NOh7JVJryhQZ6lXYM+sTEW2JIDn4JubHTey/ZHHe
Xo+xjux+HvNhq2d+7bi8PpKp2D9/qw3+nYq2nd61ACPIC/SStXts9IcuduhtFHGQ
QAeDfUIFcY7zHESyzrED7wXlngipwm0rrzOLOeybZ5nnXwg5URM=
=FwSp
-----END PGP SIGNATURE-----