ngIRCd Release 25~rc1

[ngircd-web.git] / news.php.en

diff --git a/news.php.en b/news.php.en
index 1a146cd914c2aa65df48b58934fe2140a120416b..8ee4518a281cd7fc5e0d33e4594cfb0ab2233811 100644 (file)
--- a/news.php.en
+++ b/news.php.en
@@ -13,8 +13,9 @@
 </h3>
 <p>
        The current stable version is
-       <strong>Release 19.2</strong> of June 19 2012,
-       please also refer to the <a href="download.php.en">Download</a>
+       <strong>Release 24</strong> of January 20 2017,
+       for testing <strong>Release 25~rc1</strong> of August 11 2018 is available,
+       please refer to the <a href="download.php.en">Download</a>
        options.
 </p>
 <h3 id="history">
@@ -22,12 +23,13 @@
 </h3>
 <p class="security">
        <strong>Caution:</strong>
-       ngIRCd-versions previous to 0.10.4 contain a bug which can be used
-       (also remotely) to crash the daemon. All installations should be
-       updated to version 0.10.4 or newer!<br>
-       The SSL/TLS functions prior to 14.1 have a bug which can crash the
-       daemon as well. If using SSL/TLS you should update to at least
-       ngIRCd 14.1 (or newer)!
+       ngIRCd 20, 20.1, and 20.2 contain an error that could crash
+       the server daemon when the configuration option <q>NoticeAuth</q> is
+       enabled (which is <em>not</em> the default).
+       ngIRCd 20 and 20.1 both contain an additional error that allows
+       arbitrary users to crash the server daemon.
+       <strong>All installations should be updated to version 20.3 or
+       newer!</strong>
 </p>
 <p>
        The <a href="doc/NEWS">NEWS</a>-file and the
@@ -37,4 +39,3 @@
 <?php
        end_page();
 ?>
-