tocsin

Debian/atheme-services: critical 9.1

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence.

Action: Upgrade atheme-services to 7.2.12-1 or later.

Affected

introducedfixedlast affected
07.2.12-1-

Fixed versions

7.2.12-1

Sources

published · modified · JSON