Bug#891907: memcached should disable UDP by default

2018-03-07 Thread Hanno Böck
On Tue, 6 Mar 2018 18:58:22 +0100 Guillaume Delacour wrote: > The version 1.5.6 will be uploaded in the archive in a few days. > I'll try to propose a backport patch at least for versions in stretch > and jessie (with upstream review, if possible). Ubuntu has published fixes for several versions

Bug#891907: memcached should disable UDP by default

2018-03-06 Thread Guillaume Delacour
Hi, Le 02/03/2018 à 12:39, Hanno Böck a écrit : > Package: memcached > Version: 1.4.33-1 > > Memcached is currently involved in some massive ddos attacks, see e.g.: > https://blog.cloudflare.com/memcrashed-major-amplification-attacks-from-port-11211/ > > The UDP protocol of memcached can be abus

Bug#891907: memcached should disable UDP by default

2018-03-02 Thread Hanno Böck
Package: memcached Version: 1.4.33-1 Memcached is currently involved in some massive ddos attacks, see e.g.: https://blog.cloudflare.com/memcrashed-major-amplification-attacks-from-port-11211/ The UDP protocol of memcached can be abused for very effective DDoS amplification attacks and should the