2010
memcached (1.4.5-1) unstable; urgency=high
* New upstream release. Main changes since 1.4.2 are:
New features:
- Support for SASL authentication.
- New script damemtop - a memcached top.
- Slab optimizations.
- New stats, for reclaimed memory and SASL events.
Bugs fixed:
- Malicious input can crash server (CVE-2010-1152). Closes: #579913.
- Fixed several problems with slab handling and growth.
- Provide better error reporting.
- Fix get stats accounting.
- Fixed backwards compatibility with delete 0.
- Documentation fixes.
- Various build fixes, among others, fixed FTBFS with gcc-4.5 (closes:
#565033).
* Refreshed and renamed 01_init_script_compliant_with_LSB.patch.
* Fixed lintian warnings by adding $remote_fs to init.d script.
* Removed non-existent document (doc/memory_management.txt).
* debian/control: Bumped Standards-Version to 3.8.4 (no changes).
*
-- David Martínez Moreno <ender@debian.org> Wed, 12 May 2010 11:41:22 +0200
2009
memcached (1.4.2-1) unstable; urgency=medium
* New upstream release, primarily bugfixes, some of them critical, hence
the urgency:
- Reject keys larger than 250 bytes in the binary protocol.
- Bounds checking on stats cachedump.
- Binary protocol set+cas wasn't returning a new cas ID.
- Binary quitq didn't actually close the connection
- Slab boundary checking cleanup (bad logic in unreachable code)
- Get hit memory optimizations
- Disallow -t options that cause the server to not work
- Killed off incomplete slab rebalance feature.
* debian/patches:
- 01_init_script_compliant_with_LSB.patch: Remade as upstream applied a
whitespace cleanup script that broke the patch.
- 02_manpage_additions.patch: Added missing parameters to the memcached
manpage.
* Removed TODO from debian/docs.
-- David Martínez Moreno <ender@debian.org> Fri, 16 Oct 2009 15:09:43 +0200
memcached (1.4.1-1) unstable; urgency=high
* New upstream release (closes: #545883): - Finally addressed CVE-2009-2415: heap-based buffer overflow in length processing (closes: #540379). - Boundary condition during pipelined decoding caused crash. - Bad initialization during buffer realloc. - Buffer overrun in stats_prefix_find. - Other fixes and cleanups. * Changed the default start to yes in /etc/init.d/memcached as well. * debian/watch updated with new format and URL in code.google.com. Thanks, Monty Taylor. * Added get-orig-source target, thanks to Monty Taylor. * debian/control: - Upgraded Standards-Version to 3.8.3 (no changes). - Added Suggests: libmemcached. - Bumped debhelper dependency and debian/compat to 6. - Added Depends on quilt 0.46-7 in order to use dh_quilt_* helpers. * debian/rules: Added dh_quilt_* helpers. * Added direct patches to source as quilt patches. * debian/README.source: Created such file to shut up lintian pedantic.
-- David Martínez Moreno <ender@debian.org> Fri, 18 Sep 2009 02:43:54 +0200
memcached (1.4.0-1) unstable; urgency=low
* New upstream release (closes: #484301, #537239): - New binary protocol, supporting CAS (compare-and-swap). - Non-threaded version is no longer possible, you just choose to run 1 thread to have similar behaviour. - Lots of performance bottlenecks fixed (connection starvation, contention, disabling of CAS, locks for hash table expansion...). - Lots of new stats. Main change is that stats now are per-slab where possible. - Code cleanup, lots of bugs fixed, added tests, enhanced documentation.
-- David Martínez Moreno <ender@debian.org> Sat, 01 Aug 2009 23:26:45 +0200
memcached (1.2.8-2) unstable; urgency=low
* After some thinking, probably making memcached starting by default is the
right thing to do (closes: #536524).
* Added status support to init.d script (closes: #528689). Thanks, Peter!
* debian/control: Added dependency on lsb-base (>= 3.2-13).
-- David Martínez Moreno <ender@debian.org> Sat, 11 Jul 2009 00:29:51 +0200
memcached (1.2.8-1) unstable; urgency=high
* New upstream release, urgency=high because of two critical bugs prior
to this release:
- In 1.2.7 under multithreaded mode, memcached would never restart
accepting connections after hitting the maximum connection limit.
- Remove 'stats maps' command, as it is a potential information leak,
usable if versions prior to 1.2.8 ever have buffer overflows discovered
(CVE-2009-1494). Closes: #526554.
- Make -b command (setting the TCP listen backlog) actually work.
* debian/rules: Removed obsolete --disable-static.
-- David Martínez Moreno <ender@debian.org> Sat, 02 May 2009 19:15:49 +0200
memcached (1.2.7-1) unstable; urgency=low
* New upstream release, released on 4/3/2009.
- New statistics.
- Added -R option. Limit the number of requests processed by a connection
at once. Prevents starving other threads if bulk loading.
- Added -b command for setting the tcp listen backlog.
- Many minor bugfixes.
-- David Martínez Moreno <ender@debian.org> Sat, 02 May 2009 18:13:39 +0200
memcached (1.2.6-1) unstable; urgency=low
* New upstream release (closes: #505037). Released on 29/7/2008. - Major crash fixes. - DTrace support. - Minor updates. * debian/memcached.postrm: Now /var/log/memcached.log is removed on purge. Thanks, jidanni! (closes: #447288).
-- David Martínez Moreno <ender@debian.org> Sat, 28 Feb 2009 09:43:24 +0000
memcached (1.2.5-1) unstable; urgency=low
* New upstream release, released on 3/2/2008:
- Minor bugfixes.
- Added support for Opensolaris.
- IPv6 support.
- "noreply" mode for many commands.
- Made "out of memory· errors more clear.
- Added eviction/OOM tracking per slab class.
-- David Martínez Moreno <ender@debian.org> Fri, 27 Feb 2009 10:48:14 +0000
memcached (1.2.4-1) unstable; urgency=low
* New upstream release (closes: #454699). Released on 6/12/2007: - Many bug and platform fixes since 1.2.2. - New threading support for stat queries. - New commands 'append', 'prepend', 'gets', and 'cas'. - Updates to the manpage (closes: #441067). - Now memcached has a flag -a to restrict the socket to a group (closes: #446606). * debian/rules: Added memcached-tool to the set of installed scripts. Thanks, Cyril! (closes: #512400).
-- David Martínez Moreno <ender@debian.org> Thu, 26 Feb 2009 12:07:03 +0000
memcached (1.2.3-1) unstable; urgency=low
* Take over memcached package.
* New upstream release. Mostly a documentation and warning fixing release.
This one was released on 6/7/2007.
* Added an /etc/default/memcached, thanks to Mark Ferlatte (closes:
#467356).
* debian/rules: Added --enable-threads to configure. It's amazing how this
could be missing from mainstream packages in Debian.
* debian/control:
- Put myself as Maintainer.
- Added Homepage field.
- Bumped Standards-Version to 3.8.0.
- Added ${misc:Depends} to Depends line.
* debian/copyright: Added a lot of information.
* debian/memcached.post{inst,rm}: Added set -e in order to catch errors.
-- David Martínez Moreno <ender@debian.org> Thu, 26 Feb 2009 09:51:46 +0000
2007
memcached (1.2.2-1) unstable; urgency=low
* New upstream release
-- Jay Bonci <jaybonci@debian.org> Fri, 29 Jun 2007 10:18:03 -0400
memcached (1.2.1-1) unstable; urgency=low
* New upstream release (Closes: #405054) * Fix to logfile output so logrotate will work (Closes: #417941) * Listen in on localhost by default (Closes: #383660) * Default configuration suggests nobody by default (Closes: #391351) * Bumped policy version to 3.7.2.2 (No other changes)
-- Jay Bonci <jaybonci@debian.org> Wed, 02 May 2007 11:35:42 -0400
2005
memcached (1.1.12-1) unstable; urgency=low
* New upstream version * Updates watchfile so uupdate will work
-- Jay Bonci <jaybonci@debian.org> Mon, 11 Apr 2005 11:54:39 -0400
memcached (1.1.11-3) unstable; urgency=low
* Rebuild against non-broken libevent
-- Jay Bonci <jaybonci@debian.org> Fri, 18 Feb 2005 09:11:55 -0500
2004
memcached (1.1.11-2) unstable; urgency=low
* Adds debian/watch file so uscan will work * Added additional paragraph to debian/control (Closes: #262069)
-- Jay Bonci <jaybonci@debian.org> Wed, 27 Oct 2004 13:49:22 -0400
memcached (1.1.11-1) unstable; urgency=low
* New upstream version * Fix silly typo that kept daemon from running as www-data (Closes: #239854) - Thanks to Karaszi Istvan for the report * Fix to reopen fds as the logfile, adds logfile support (Closes: #243522)
-- Jay Bonci <jaybonci@debian.org> Wed, 5 May 2004 17:25:25 -0400
2003
memcached (1.1.10-1) unstable; urgency=low
* New upstream version
-- Jay Bonci <jaybonci@debian.org> Wed, 31 Dec 2003 10:01:27 -0500
memcached (1.1.9-1) unstable; urgency=low
* Initial Release (Closes: #206268).
-- Jay Bonci <jaybonci@debian.org> Wed, 15 Oct 2003 15:53:51 -0400