Home / mailings

PDF

[USN-9056-1] Prosody Community Modules vulnerability

Posted on 12 November 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-9056-1
November 11, 2026

prosody-modules vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

Prosody Community Modules could be made to grant administrator privileges to an attacker.

Software Description:
- prosody-modules: Selection of community modules for Prosody

Details:

It was discovered that the LDAP authentication modules in Prosody Community
Modules did not fully verify XMPP addresses when checking for administrator
privileges. A remote attacker could possibly use this issue to gain
administrator privileges.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
prosody-modules 0.0~hg20170929.c53cc1ae4788+dfsg-3ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 16.04 LTS
prosody-modules 0.0~hg20150813.12ac88940fe3-2ubuntu0.1~esm1
Available with Ubuntu Pro

After a standard system update you need to restart Prosody to make all the
necessary changes.

References:
https://ubuntu.com/security/notices/USN-9056-1
CVE-2020-8086

--===============1829004435695980545==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP