X-Git-Url: https://arthur.barton.de/gitweb/?a=blobdiff_plain;f=news.php.en;h=201032df19f8793a2b7feb5e77ffdacd81237ce1;hb=c0eabcfd1df63d0ad993d82e655b9f8738f29227;hp=24dd8fce5e6588858f012a61ea5b8af3ae77fbcc;hpb=d080444e57dc467ceaeb95dd5aa93f6fb4309ef1;p=ngircd-web.git

diff --git a/news.php.en b/news.php.en
index 24dd8fc..201032d 100644
--- a/news.php.en
+++ b/news.php.en
@@ -13,22 +13,24 @@
 </h3>
 <p>
 	The current stable version is
-	<strong>Release 17.1</strong> of Dezember 19 2010,
-	please also refer to the <a href="download.php.en">Download</a>
+	<strong>Release 23</strong> of November 16 2015,
+	for testing <strong>Release 24~rc1</strong> of January 7 2017 is available,
+	please refer to the <a href="download.php.en">Download</a>
 	options.
 </p>
-<p class="security">
-	<strong>Caution:</strong>
-	ngIRCd-versions previous to 0.10.4 contain a bug which can be used
-	(also remotely) to crash the daemon. All installations should be
-	updated to version 0.10.4 or newer!<br>
-	The SSL/TLS functions prior to 14.1 have a bug which can crash the
-	daemon as well. If using SSL/TLS you should update to at least
-	ngIRCd 14.1 (or newer)!
-</p>
 <h3 id="history">
 	History
 </h3>
+<p class="security">
+	<strong>Caution:</strong>
+	ngIRCd 20, 20.1, and 20.2 contains an error that could crash
+	the server daemon when the configuration option <q>NoticeAuth</q> is
+	enabled (which is <em>not</em> the default).
+	ngIRCd 20 and 20.1 both contain an additional error that allows
+	arbitrary users to crash the server daemon.
+	<strong>All installations should be updated to version 20.3 or
+	newer!</strong>
+</p>
 <p>
 	The <a href="doc/NEWS">NEWS</a>-file and the
 	<a href="doc/ChangeLog">ChangeLog</a>
@@ -37,4 +39,3 @@
 <?php
 	end_page();
 ?>
-