ngIRCd Release 20.3

[ngircd-alex.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 9fe53c7a1c0d1a4fcefb695e0c8f25fe45be1211..1186276b88d21e6d549f432c923f621f04e6567b 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -102,6 +102,13 @@ ngIRCd 21
     and then is used to output individual help texts to specific topics.
     Please see the file ./doc/Commands.txt for details.
 
+ngIRCd 20.3 (2013-08-23)
+
+  - Security: Fix a denial of service bug (server crash) which could happen
+    when the configuration option "NoticeAuth" is enabled (which is NOT the
+    default) and ngIRCd failed to send the "notice auth" messages to new
+    clients connecting to the server (CVE-2013-5580).
+
 ngIRCd 20.2 (2013-02-15)
 
   - Security: Fix a denial of service bug in the function handling KICK