Skip to content
OpenAdvisories
High RHSA-2026:63224 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Sep 22, 2026 · Updated Sep 22, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 memcached 0:1.6.45-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 memcached-devel 0:1.6.45-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 memcached-selinux 0:1.6.45-1.hum1

Vulnerabilities 2

  • High 8.1
    CVE-2026-47783

    In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a…

    memcached memcached memcached memcached Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2026-90698

    memcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds

    A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try_read_command_asciiauth of the file proto_text.c of the component mcmc Tokenizer. The manipulation results in out-of-bounds read. It is possible …

    memcached memcached Debian Ubuntu

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-90698
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-47783
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63224.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2480089
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-47783
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-47783
  • article
    https://github.com/memcached/memcached/commit/d13f282b4bce33a9c33b8a1bbf07f12114160fed
  • article
    https://github.com/memcached/memcached/compare/1.6.41...1.6.42
  • article
    https://github.com/memcached/memcached/wiki/ReleaseNotes1642
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2532955
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-90698
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-90698
  • article
    https://github.com/memcached/memcached/
  • article
    https://github.com/memcached/memcached/commit/af05c9302bba508b736c3da1d5670f63fe8b7db4
  • article
    https://github.com/memcached/memcached/releases/tag/1.6.44
  • article
    https://protectiv.ph/research/memcached-asciiauth-empty-line-dos
  • article
    https://vuldb.com/cve/CVE-2026-90698
  • article
    https://vuldb.com/submit/916217
  • article
    https://vuldb.com/submit/916219
  • article
    https://vuldb.com/vuln/403231
  • article
    https://vuldb.com/vuln/403231/cti