RHSA-2026:23261MediumCVSS 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
June 4, 2026
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-47784 →

📋 Description

CVE-2026-47784 — memcached: Memcached: Information disclosure via timing side channel

🎯 Affected products5

  • Red Hat Hardened Images
  • memcached-main@aarch64 as a component of Red Hat Hardened Images
  • memcached-main@noarch as a component of Red Hat Hardened Images
  • memcached-main@src as a component of Red Hat Hardened Images
  • memcached-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: To mitigate this issue, restrict network access to the memcached service to only trusted clients and networks using firewall rules. If SASL authentication is not strictly required, consider disabling it. If SASL is necessary, ensure that strong, unique passwords are used and rotated regularly. Example firewall rule (adjust port and source as needed): `firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="<TRUSTED_IP_RANGE>" port port="11211" protocol="tcp" accept'` `firewall-cmd --reload` To bind memcached to localhost, edit `/etc/sysconfig/memcached` and set `OPTIONS="-l 127.0.0.1"`. Restart the memcached service: `systemctl restart memcached` Note that restarting the memcached service will clear all cached data.

🔗 References (5)