ngIRCd Release 23~rc1

[ngircd-web.git] / news.php.en

diff --git a/news.php.en b/news.php.en
index b60a3cd285db4310b52588791770287547f01262..18221785c475a5de66fedfd6403450a476f0bf20 100644 (file)
--- a/news.php.en
+++ b/news.php.en
@@ -13,8 +13,10 @@
 </h3>
 <p>
        The current stable version is
-       <strong>Release 20</strong> of December 17 2012,
-       please also refer to the <a href="download.php.en">Download</a>
+       <strong>Release 22.1</strong> of April 6 2015,
+       testing version is
+       <strong>Release 23~rc1</strong> of September 9 2015,
+       please refer to the <a href="download.php.en">Download</a>
        options.
 </p>
 <h3 id="history">
@@ -22,12 +24,13 @@
 </h3>
 <p class="security">
        <strong>Caution:</strong>
-       ngIRCd-versions previous to 0.10.4 contain a bug which can be used
-       (also remotely) to crash the daemon. All installations should be
-       updated to version 0.10.4 or newer!<br>
-       The SSL/TLS functions prior to 14.1 have a bug which can crash the
-       daemon as well. If using SSL/TLS you should update to at least
-       ngIRCd 14.1 (or newer)!
+       ngIRCd 20, 20.1, and 20.2 contains an error that could crash
+       the server daemon when the configuration option <q>NoticeAuth</q> is
+       enabled (which is <em>not</em> the default).
+       ngIRCd 20 and 20.1 both contain an additional error that allows
+       arbitrary users to crash the server daemon.
+       <strong>All installations should be updated to version 20.3 or
+       newer!</strong>
 </p>
 <p>
        The <a href="doc/NEWS">NEWS</a>-file and the
@@ -37,4 +40,3 @@
 <?php
        end_page();
 ?>
-