USN-8984-1: jabberd2 vulnerability
Published Nov 3, 2026
·Updated
It was discovered that jabberd2 allowed SASL ANONYMOUS authentication even when it was not enabled in the configuration. A remote attacker could possibly use this issue to bypass authentication.
Affected Software
3 affected componentsFixes available
All of the following
ubuntu/jabberd2<2.3.4-1ubuntu2+esm1
2.3.4-1ubuntu2+esm1
Ubuntu Ubuntu=16.04
ubuntu/jabberd2<2.3.4-1ubuntu2+esm1
2.3.4-1ubuntu2+esm1
Event History
Nov 3, 2026
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Advisory Published
via OSV·05:35 PM
Data Sourced
via OSV·05:35 PM
DescriptionAffected Software