Ubuntu 24.04 LTS USN-6761-1 critical: Anope authentication bypass

ubuntu

April 30, 2024

Anope could be made to bypass authentication checks for suspended accounts.

Summary

Anope could be made to bypass authentication checks for suspended accounts.

Software Description:

- anope: an open source set of IRC Services

Details:

It was discovered that Anope did not properly process credentials for

suspended accounts. An attacker could possibly use this issue to normally

Topics Covered

security advisory security issue critical software update ubuntu authentication bypass Ubuntu LTS anope

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   anope                           2.0.12-1ubuntu1

Ubuntu 23.10
   anope                           2.0.12-1ubuntu0.23.10.1

Ubuntu 22.04 LTS
   anope                           2.0.9-1ubuntu0.1

Ubuntu 20.04 LTS
   anope                           2.0.6-1ubuntu0.1

Ubuntu 18.04 LTS
   anope                           2.0.4-2ubuntu0.1~esm1
                                   Available with Ubuntu Pro

Ubuntu 16.04 LTS
   anope                           2.0.3-1ubuntu0.1~esm1
                                   Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.