[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-90698/memcached

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Sep 24 20:17:02 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fc29e4c9 by Salvatore Bonaccorso at 2026-09-24T21:16:45+02:00
Update status for CVE-2026-90698/memcached

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -16256,9 +16256,11 @@ CVE-2026-90699 (A weakness has been identified in D-Link DWR-M920 1.1.7. This is
 	NOT-FOR-US: D-Link
 CVE-2026-90698 (A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. ...)
 	- memcached 1.6.45-1
+	[trixie] - memcached <not-affected> (Vulnerable code not present)
 	[bookworm] - memcached <not-affected> (Vulnerable code not present)
 	NOTE: https://protectiv.ph/research/memcached-asciiauth-empty-line-dos
 	NOTE: protocol processing code dedublication done in: https://github.com/memcached/memcached/commit/778cfd6e56a276f69bdd1c4c7725c977147aee47 (1.6.40)
+	NOTE: Introduced with: https://github.com/memcached/memcached/commit/591fba966837b2f3398ccf7b5fe3886ac19e9e20 (1.6.41)
 	NOTE: Requisite: https://github.com/memcached/memcached/commit/9981d748f866e80a8f2ee1b12bf45717f9595df9 (1.6.42)
 	NOTE: Fixed by: https://github.com/memcached/memcached/commit/af05c9302bba508b736c3da1d5670f63fe8b7db4 (1.6.44)
 	NOTE: Followup: https://github.com/memcached/memcached/commit/e8364b58b193e42b7db9db8506471a1efe74ab6d (1.6.45)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc29e4c9abddf8cd8ba99e4079ef94ebf22d978c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc29e4c9abddf8cd8ba99e4079ef94ebf22d978c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260924/1a9e0ec5/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list