-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 May 2026 10:51:06 -0700 Source: memcached Architecture: source Version: 1.6.9+dfsg-1+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Chris Lamb <lamby@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Closes: 1137214 Changes: memcached (1.6.9+dfsg-1+deb11u1) bullseye-security; urgency=high . * Maintainer upload for the LTS team. * CVE-2026-47783 & CVE-2026-47784: Address two timing side-channel attacks in the SASL authentication. (Closes: #1137214) Checksums-Sha1: 7948b9c435ef2309f73107a116520b5c93a0fb5d 2047 memcached_1.6.9+dfsg-1+deb11u1.dsc 1eaaf0ed9f800e3827cb9ceb923e2c158add4832 399800 memcached_1.6.9+dfsg.orig.tar.xz 54ef2be7ddb0fce2b478a951cc5c4f1a31512150 15964 memcached_1.6.9+dfsg-1+deb11u1.debian.tar.xz f7b8d4a06bb74b2d0e5e317b1acf8a61bf247218 5635 memcached_1.6.9+dfsg-1+deb11u1_source.buildinfo Checksums-Sha256: ff9b4c5d2a29ecdd8a6b2e4af8d5bbb6cfb25365a41271fc97fd2f87ec7817fc 2047 memcached_1.6.9+dfsg-1+deb11u1.dsc 251035ef51c6c8bb28e6e9271c8a46acd2c55235b47ffe78aa8cf935a163c2a4 399800 memcached_1.6.9+dfsg.orig.tar.xz 8ce1bf380b941ee522921723d9668a488aed6ad913352d9a55586de897ca8ca2 15964 memcached_1.6.9+dfsg-1+deb11u1.debian.tar.xz 5da72b55ac10ad78a879050088c052c69d0b4e0a1bdba6f0c78c85988d75e103 5635 memcached_1.6.9+dfsg-1+deb11u1_source.buildinfo Files: 303f593918c72c93552e7a497377ef59 2047 web optional memcached_1.6.9+dfsg-1+deb11u1.dsc 1e6b311f6e88a1fb68ebe87049ad268b 399800 web optional memcached_1.6.9+dfsg.orig.tar.xz 633e6605725914af64178f32d072e9ea 15964 web optional memcached_1.6.9+dfsg-1+deb11u1.debian.tar.xz 08d5608877854d7140feaa027eeaffd8 5635 web optional memcached_1.6.9+dfsg-1+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmoV6qUACgkQHpU+J9Qx HlgpPQ//SKT38zn9H7T40MIeYT1WiFcwaLS+lrflai6Qzhrh/2zYZ+bDTbpf8vOB 0ANR/RnJvhpjO496KspZUX/FE6iB/DCeCFHHBuNE/mlWkL0nnJfyo56OWD6eOa0E 3FtqI3koqtsR2SSiCnb8pL1poPE3XMucDXI8mh7yvB3C7MZdxlv0s2UAMA4/FtPv /ps2txykFHrKxV/L5bsk38GQbU8M+h4htVMNGJ3avVHUtqm9GKHeDyMJ1EClzzsC UOlp6r9SuzhduQ536F4FJU1aOvqYVmtPBp5jJqnmF2VDVQMoTHz/hsu4N+FjZ9qV HNt6poKysdmsKGV4iL2yG1VlMu8ufnReTiUfCAoQNNZ5K8yqRxesDujSDktvAQ27 QtokKzsi0WFNyqSr6fwKtZXqn+NreeLs7F3/7S6cDpP3YO9XYns6oXo7Fl7MZlxW nz592Qzb0yXyOnV+5QSpMLpsGlagtQPd/B/R5djzFm4p+w1Fhk7WweT+BO+sGkgc 2TkSQRRlDi4C+bMaPbdDXZjfwLI7JtoE7SlDZ18bitHJEy4vWXOoLDqLeFcvcZKX 5BW8mUlhY7cxY0X1gK5Sb8BTdlDtsdRxVkRyge6nr4d/i/XwmiBFSnlWb7dddLIc HncDMUUwINp50u5kPJ2+poXCUIFGTmmBCa+WNN/CAd+xGdu3e6g= =yaMQ -----END PGP SIGNATURE-----