From aa9e543b4e79fec3206bd17885f8d230e2b8328b Mon Sep 17 00:00:00 2001 From: CBL-Mariner-Bot <75509084+CBL-Mariner-Bot@users.noreply.github.com> Date: Mon, 13 Nov 2023 09:40:45 -0800 Subject: [PATCH] [AUTO-CHERRYPICK] Upgrade memcached to v1.6.22: Fixes CVEs 2023-46852 and 2023-46853 - branch main (#6726) Co-authored-by: Harshit Gupta --- SPECS/memcached/memcached.signatures.json | 2 +- SPECS/memcached/memcached.spec | 7 +++++-- cgmanifest.json | 4 ++-- 3 files changed, 8 insertions(+), 5 deletions(-) diff --git a/SPECS/memcached/memcached.signatures.json b/SPECS/memcached/memcached.signatures.json index 885be0e97e..e54d656c2c 100644 --- a/SPECS/memcached/memcached.signatures.json +++ b/SPECS/memcached/memcached.signatures.json @@ -1,6 +1,6 @@ { "Signatures": { - "memcached-1.6.13.tar.gz": "bd1abadd85f678c296628c947cc4b7b462abf0e5b32c68a26718ade51387b5d4", + "memcached-1.6.22.tar.gz": "34783a90a4ccf74c4107085fd92b688749d23b276cfdad9f04e4f725a05d1ca7", "memcached.sysconfig": "31f7d20fad86bdd2bc5692619928af8785dc0e9f858863aeece67cff0e4edfd2" } } \ No newline at end of file diff --git a/SPECS/memcached/memcached.spec b/SPECS/memcached/memcached.spec index b3b92afada..05c186ffb3 100644 --- a/SPECS/memcached/memcached.spec +++ b/SPECS/memcached/memcached.spec @@ -6,8 +6,8 @@ %bcond_with seccomp Summary: High Performance, Distributed Memory Object Cache Name: memcached -Version: 1.6.13 -Release: 4%{?dist} +Version: 1.6.22 +Release: 1%{?dist} License: BSD Vendor: Microsoft Corporation Distribution: Mariner @@ -120,6 +120,9 @@ exit 0 %{_includedir}/memcached/* %changelog +* Thu Nov 09 2023 Harshit Gupta - 1.6.22-1 +- Upgrade to 1.6.22 for CVEs 2023-46852 and 2023-46853 + * Wed Sep 20 2023 Jon Slobodzian - 1.6.13-4 - Recompile with stack-protection fixed gcc version (CVE-2023-4039) diff --git a/cgmanifest.json b/cgmanifest.json index 96c4518b5f..bd2b25b818 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -13111,8 +13111,8 @@ "type": "other", "other": { "name": "memcached", - "version": "1.6.13", - "downloadUrl": "https://www.memcached.org/files/memcached-1.6.13.tar.gz" + "version": "1.6.22", + "downloadUrl": "https://www.memcached.org/files/memcached-1.6.22.tar.gz" } } },