TEMP-0906879-C6E80C

Name	TEMP-0906879-C6E80C
Description	security issue with the PASS command and duplicate server instances
Source	Automatically generated temporary name. Not for external reference.
Debian Bugs	906879

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
charybdis (PTS)	jessie, jessie (lts)	3.4.2-5+deb8u2	fixed
	stretch	3.5.3-1	fixed
	buster	4.1.1-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Debian Bugs
charybdis	source	wheezy	(unfixed)	end-of-life
charybdis	source	jessie	(not affected)
charybdis	source	stretch	(not affected)
charybdis	source	(unstable)	4.1.1-1		906879

Notes

[stretch] - charybdis <not-affected> (Vulnerable code added later)
[jessie] - charybdis <not-affected> (Vulnerable code added later)
partial fix: https://github.com/charybdis-ircd/charybdis/commit/d4b2529a61fb48ebcd54bc0fcc6f400f97bfe251