Stay Secure with the Latest Linux Advisories

security advisorysecurity issuecritical

Ubuntu 24.04 LTS USN-6761-1 critical: Anope authentication bypass

Anope could be made to bypass authentication checks for suspended accounts.. ========================================================================== Ubuntu Security Notice USN-6761-1 April 30, 2024 anope vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 23.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Anope could be made to bypass authentication checks for suspended accounts. Software Description: - anope: an open source set of IRC Services Details: It was discovered that Anope did not properly process credentials for suspended accounts. An attacker could possibly use this issue to normally login to the platform as a suspended user after changing their password. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS anope 2.0.12-1ubuntu1 Ubuntu 23.10 anope 2.0.12-1ubuntu0.23.10.1 Ubuntu 22.04 LTS anope 2.0.9-1ubuntu0.1 Ubuntu 20.04 LTS anope 2.0.6-1ubuntu0.1 Ubuntu 18.04 LTS anope 2.0.4-2ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS anope 2.0.3-1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6761-1 CVE-2024-30187 Package Information: https://launchpad.net/ubuntu/+source/anope/2.0.12-1ubuntu1 https://launchpad.net/ubuntu/+source/anope/2.0.12-1ubuntu0.23.10.1 https://launchpad.net/ubuntu/+source/anope/2.0.9-1ubuntu0.1 https://launchpad.net/ubuntu/+source/anope/2.0.6-1ubuntu0.1 . UbuntuSecurity Notice USN-6762-2 highlights a significant vulnerability in Anope's system that allows unauthorized access to deactivated accounts. Immediate patching advised.. Anope Security, Authentication Bypass, Ubuntu Update, Software Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Apr 30, 2024 •Critical Ubuntu