Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update libmemcached and pylibmc to avoid security bug #794

saschat opened this Issue Dec 19, 2018 · 2 comments


None yet
1 participant
Copy link

commented Dec 19, 2018

The current version of libmemcached has a bug that results in the following pylibmc error:

MemcachedError: error 40 from memcached_get: FAILED TO SEND AUTHENTICATION TO SERVER, no mechanism available -> libmemcached/

which has also been reported in #201. We currently have an open ticket with a Heroku/MemCachier customer that faces the same issue.

Unfortunately, libmemcached does not seem to be maintained any longer. For this reason I forked the libmemcached library here, fixed this bug, and added instructions on how to make sure pylibmc uses the fixed library.

Is it possible to use the fixed library in the Heroku buildpack for Python?


This comment has been minimized.

Copy link

commented Dec 19, 2018


This comment has been minimized.

Copy link

commented Feb 13, 2019

Thanks to @dzuelke's efforts, Canonical fixed libmemcached so this is no longer an issue. Pylibmc users are still blocked on lericson/pylibmc#246, in the meantime they can use pylibmc-1.5.2 which uses the OS provided libmemcached.

@saschat saschat closed this Feb 13, 2019

doismellburning added a commit to doismellburning/emporium that referenced this issue Apr 12, 2019

Use BMemcached backend instead of PyLibMCCache

Looks like Heroku have a buggy version of libmemcached which meant that
pylibmc was failing to auth there with "FAILED TO SEND AUTHENTICATION TO

Switching to django-bmemcached as recommended by Memcached Cloud
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.