X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=news.php.en;h=8ee4518a281cd7fc5e0d33e4594cfb0ab2233811;hb=f59833d39a7afd6cb2b9abdd70d81c581eb96943;hp=b29c2d73558295467a35eff40ad1a1031c1d1052;hpb=9e51c0f12357f45530858c000c9c6072c9c7c378;p=ngircd-web.git

diff --git a/news.php.en b/news.php.en
index b29c2d7..8ee4518 100644
--- a/news.php.en
+++ b/news.php.en
@@ -13,22 +13,24 @@
 </h3>
 <p>
 	The current stable version is
-	<strong>Release 18</strong> of July 10 2011,
-	please also refer to the <a href="download.php.en">Download</a>
+	<strong>Release 24</strong> of January 20 2017,
+	for testing <strong>Release 25~rc1</strong> of August 11 2018 is available,
+	please refer to the <a href="download.php.en">Download</a>
 	options.
 </p>
-<p class="security">
-	<strong>Caution:</strong>
-	ngIRCd-versions previous to 0.10.4 contain a bug which can be used
-	(also remotely) to crash the daemon. All installations should be
-	updated to version 0.10.4 or newer!<br>
-	The SSL/TLS functions prior to 14.1 have a bug which can crash the
-	daemon as well. If using SSL/TLS you should update to at least
-	ngIRCd 14.1 (or newer)!
-</p>
 <h3 id="history">
 	History
 </h3>
+<p class="security">
+	<strong>Caution:</strong>
+	ngIRCd 20, 20.1, and 20.2 contain an error that could crash
+	the server daemon when the configuration option <q>NoticeAuth</q> is
+	enabled (which is <em>not</em> the default).
+	ngIRCd 20 and 20.1 both contain an additional error that allows
+	arbitrary users to crash the server daemon.
+	<strong>All installations should be updated to version 20.3 or
+	newer!</strong>
+</p>
 <p>
 	The <a href="doc/NEWS">NEWS</a>-file and the
 	<a href="doc/ChangeLog">ChangeLog</a>
@@ -37,4 +39,3 @@
 <?php
 	end_page();
 ?>
-