X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd-alex.git;a=blobdiff_plain;f=NEWS;h=38f6029c5b32b397d3522d258da919f74aa109df;hp=c3f9c49babc239d5c7e6aca15bfc0b749d0a9a2d;hb=a14eb495b75c8c2a2a32ddb6eecf50dc174f811c;hpb=1f59821270e7298b380183778672e6db9c87971b

diff --git a/NEWS b/NEWS
index c3f9c49b..38f6029c 100644
--- a/NEWS
+++ b/NEWS
@@ -9,6 +9,16 @@
                                   -- NEWS --
 
 
+ngIRCd 20.2 (2013-02-15)
+
+  - This release is a bugfix release only, without new features.
+  - Security: Fix a denial of service bug in the function handling KICK
+    commands that could be used by arbitrary users to to crash the daemon.
+
+ngIRCd 20.1 (2013-01-02)
+
+  - This release is a bugfix release only, without new features.
+
 ngIRCd 20 (2012-12-17)
 
   - Allow user names ("INDENT") up to 20 characters when ngIRCd has not