Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update libmemcached and pylibmc to avoid security bug #794

Closed
saschat opened this Issue Dec 19, 2018 · 2 comments

Comments

Projects
None yet
1 participant
@saschat
Copy link

commented Dec 19, 2018

The current version of libmemcached has a bug that results in the following pylibmc error:

MemcachedError: error 40 from memcached_get: FAILED TO SEND AUTHENTICATION TO SERVER, no mechanism available -> libmemcached/sasl.cc:238

which has also been reported in #201. We currently have an open ticket with a Heroku/MemCachier customer that faces the same issue.

Unfortunately, libmemcached does not seem to be maintained any longer. For this reason I forked the libmemcached library here, fixed this bug, and added instructions on how to make sure pylibmc uses the fixed library.

Is it possible to use the fixed library in the Heroku buildpack for Python?

@saschat

This comment has been minimized.

Copy link
Author

commented Dec 19, 2018

@saschat

This comment has been minimized.

Copy link
Author

commented Feb 13, 2019

Thanks to @dzuelke's efforts, Canonical fixed libmemcached so this is no longer an issue. Pylibmc users are still blocked on lericson/pylibmc#246, in the meantime they can use pylibmc-1.5.2 which uses the OS provided libmemcached.

@saschat saschat closed this Feb 13, 2019

doismellburning added a commit to doismellburning/emporium that referenced this issue Apr 12, 2019

Use BMemcached backend instead of PyLibMCCache
heroku/heroku-buildpack-python#201
heroku/heroku-buildpack-python#794

Looks like Heroku have a buggy version of libmemcached which meant that
pylibmc was failing to auth there with "FAILED TO SEND AUTHENTICATION TO
SERVER".

Switching to django-bmemcached as recommended by Memcached Cloud

https://devcenter.heroku.com/articles/memcachedcloud
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.