USN-6761-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-6761-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6761-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/USN-6761-1

Related

Published

2024-04-30T07:33:26.773094Z

Modified

2024-04-30T07:33:26.773094Z

Summary

anope vulnerability

Details

It was discovered that Anope did not properly process credentials for suspended accounts. An attacker could possibly use this issue to normally login to the platform as a suspended user after changing their password.

References

Affected packages

Ubuntu:Pro:16.04:LTS / anope

Package

Name: anope
Purl: pkg:deb/ubuntu/anope?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.3-1ubuntu0.1~esm1

Affected versions

2.*

2.0.2-2

2.0.3-1

2.0.3-1build1

2.0.3-1build2

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "2.0.3-1ubuntu0.1~esm1",
            "binary_name": "anope"
        },
        {
            "binary_version": "2.0.3-1ubuntu0.1~esm1",
            "binary_name": "anope-dbgsym"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / anope

Package

Name: anope
Purl: pkg:deb/ubuntu/anope?arch=src?distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.4-2ubuntu0.1~esm1

Affected versions

2.*

2.0.4-2

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "2.0.4-2ubuntu0.1~esm1",
            "binary_name": "anope"
        },
        {
            "binary_version": "2.0.4-2ubuntu0.1~esm1",
            "binary_name": "anope-dbgsym"
        }
    ]
}

Ubuntu:20.04:LTS / anope

Package

Name: anope
Purl: pkg:deb/ubuntu/anope?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.6-1ubuntu0.1

Affected versions

2.*

2.0.6-1build2

2.0.6-1build3

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2.0.6-1ubuntu0.1",
            "binary_name": "anope"
        },
        {
            "binary_version": "2.0.6-1ubuntu0.1",
            "binary_name": "anope-dbgsym"
        }
    ]
}

Ubuntu:22.04:LTS / anope

Package

Name: anope
Purl: pkg:deb/ubuntu/anope?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.9-1ubuntu0.1

Affected versions

2.*

2.0.9-1build1

2.0.9-1build2

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2.0.9-1ubuntu0.1",
            "binary_name": "anope"
        },
        {
            "binary_version": "2.0.9-1ubuntu0.1",
            "binary_name": "anope-dbgsym"
        }
    ]
}

Ubuntu:23.10 / anope

Package

Name: anope
Purl: pkg:deb/ubuntu/anope?arch=src?distro=mantic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.12-1ubuntu0.23.10.1

Affected versions

2.*

2.0.12-1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2.0.12-1ubuntu0.23.10.1",
            "binary_name": "anope"
        },
        {
            "binary_version": "2.0.12-1ubuntu0.23.10.1",
            "binary_name": "anope-dbgsym"
        }
    ]
}

Ubuntu:24.04:LTS / anope

Package

Name: anope
Purl: pkg:deb/ubuntu/anope?arch=src?distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.12-1ubuntu1

Affected versions

2.*

2.0.12-1

2.0.12-1build1

2.0.12-1build2

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2.0.12-1ubuntu1",
            "binary_name": "anope"
        },
        {
            "binary_version": "2.0.12-1ubuntu1",
            "binary_name": "anope-dbgsym"
        }
    ]
}