memcache 7.x-1.3-rc1

The Working Stampede Protection Release

If you have enabled stampede protection ($conf['memcache_stampede_protection'] = TRUE;), it is strongly recommended that you upgrade. If you are unable to upgrade, you should disable stampede protection.

What’s changed since 7.x-1.2

Overview
This release is primarily being made to fix a critical bug affecting the functionality of stampede protection in the memcache module. Affecting both 7.x-1.1 and 7.x-1.2, when stampede protection is enabled stale items will be returned even after a cache flush. Find more information at https://www.drupal.org/node/2099893#comment-9007685.

Details

• #2038405: Warn about potential security vulnerability - memcached exposed to outside world
  suggest securing memcached service.
• #2099893: Race condition in locking framework
  Fixed [Stampede protection broken] Race condition in locking framework
• #2270491: Integrity constraint violations when lots of writes happen
  wrap veriable_set to catch race condition and prevent errors