An update for memcached is now available for openEuler-24.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-4101 Final 1.0 1.0 2026-09-25 Initial 2026-09-25 2026-09-25 openEuler SA Tool V1.0 2026-09-25 memcached security update An update for memcached is now available for openEuler-24.03-LTS-SP4 memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load. Security Fix(es): A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try_read_command_asciiauth of the file proto_text.c of the component mcmc Tokenizer. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.44 is able to resolve this issue. The patch is identified as af05c9302bba508b736c3da1d5670f63fe8b7db4. You should upgrade the affected component.(CVE-2026-90698) An update for memcached is now available for openEuler-24.03-LTS-SP4. openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Medium memcached https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4101 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-90698 https://nvd.nist.gov/vuln/detail/CVE-2026-90698 openEuler-24.03-LTS-SP4 memcached-1.6.42-2.oe2403sp4.aarch64.rpm memcached-debuginfo-1.6.42-2.oe2403sp4.aarch64.rpm memcached-debugsource-1.6.42-2.oe2403sp4.aarch64.rpm memcached-devel-1.6.42-2.oe2403sp4.aarch64.rpm memcached-1.6.42-2.oe2403sp4.src.rpm memcached-1.6.42-2.oe2403sp4.x86_64.rpm memcached-debuginfo-1.6.42-2.oe2403sp4.x86_64.rpm memcached-debugsource-1.6.42-2.oe2403sp4.x86_64.rpm memcached-devel-1.6.42-2.oe2403sp4.x86_64.rpm memcached-help-1.6.42-2.oe2403sp4.noarch.rpm memcached-selinux-1.6.42-2.oe2403sp4.noarch.rpm A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try_read_command_asciiauth of the file proto_text.c of the component mcmc Tokenizer. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.44 is able to resolve this issue. The patch is identified as af05c9302bba508b736c3da1d5670f63fe8b7db4. You should upgrade the affected component. 2026-09-25 CVE-2026-90698 openEuler-24.03-LTS-SP4 Medium 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L memcached security update 2026-09-25 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4101