Security notice: Add release date of ngIRCd 20.3

[ngircd-web.git] / news.php.en

diff --git a/news.php.en b/news.php.en
index 1a146cd914c2aa65df48b58934fe2140a120416b..fcf21d4a71fe9f82eb3fecb7bd4927cb47108bac 100644 (file)
--- a/news.php.en
+++ b/news.php.en
@@ -6,28 +6,44 @@
        News & History
 </h2>
 <p>
-       Latest news: ngIRCd on <a href="http://twitter.com/#!/ngIRCd">Twitter</a>.
+       Latest news: ngIRCd on <a href="https://twitter.com/ngIRCd">Twitter</a>.
 </p>
 <h3 id="status">
        Status
 </h3>
 <p>
        The current stable version is
-       <strong>Release 19.2</strong> of June 19 2012,
-       please also refer to the <a href="download.php.en">Download</a>
+       <strong>Release 26.1</strong> of January 1 2021,
+       please refer to the <a href="download.php.en">Download</a>
        options.
 </p>
+<p>
+       ngIRCd is used as the daemon in real-world in-house and public IRC
+       networks and included in the package repositories of various operating
+       systems.
+</p>
 <h3 id="history">
        History
 </h3>
+<p>
+       Development of ngIRCd started back in 2001: The server has been written
+       from scratch in C, tries to follow all relevant standards, and is not
+       based on the forefather, the daemon of the IRCNet.
+</p>
+<p>
+       It is not the goal of ngIRCd to implement all the nasty behaviors of
+       the original ircd or corner-cases in the RFCs, but to implement most of
+       the useful commands and semantics that are used by existing clients.
+</p>
 <p class="security">
        <strong>Caution:</strong>
-       ngIRCd-versions previous to 0.10.4 contain a bug which can be used
-       (also remotely) to crash the daemon. All installations should be
-       updated to version 0.10.4 or newer!<br>
-       The SSL/TLS functions prior to 14.1 have a bug which can crash the
-       daemon as well. If using SSL/TLS you should update to at least
-       ngIRCd 14.1 (or newer)!
+       ngIRCd 20, 20.1, and 20.2 contain an error that could crash
+       the server daemon when the configuration option <q>NoticeAuth</q> is
+       enabled (which is <em>not</em> the default).
+       ngIRCd 20 and 20.1 both contain an additional error that allows
+       arbitrary users to crash the server daemon.
+       <strong>All installations should be updated to version 20.3 (released
+       August 23, 2013) or newer!</strong>
 </p>
 <p>
        The <a href="doc/NEWS">NEWS</a>-file and the
@@ -37,4 +53,3 @@
 <?php
        end_page();
 ?>
-