ngIRCd Release 26~rc1

[ngircd-web.git] / news.php.en

diff --git a/news.php.en b/news.php.en
index b29c2d73558295467a35eff40ad1a1031c1d1052..1b21b5c713eb0555b95adae403d4460227fef845 100644 (file)
--- a/news.php.en
+++ b/news.php.en
@@ -6,29 +6,31 @@
        News & History
 </h2>
 <p>
-       Latest news: ngIRCd on <a href="http://twitter.com/#!/ngIRCd">Twitter</a>.
+       Latest news: ngIRCd on <a href="https://twitter.com/ngIRCd">Twitter</a>.
 </p>
 <h3 id="status">
        Status
 </h3>
 <p>
        The current stable version is
-       <strong>Release 18</strong> of July 10 2011,
-       please also refer to the <a href="download.php.en">Download</a>
+       <strong>Release 25</strong> of January 23 2019,
+       for testing <strong>Release 26~rc1</strong> of May 10 2020 is available,
+       please refer to the <a href="download.php.en">Download</a>
        options.
 </p>
-<p class="security">
-       <strong>Caution:</strong>
-       ngIRCd-versions previous to 0.10.4 contain a bug which can be used
-       (also remotely) to crash the daemon. All installations should be
-       updated to version 0.10.4 or newer!<br>
-       The SSL/TLS functions prior to 14.1 have a bug which can crash the
-       daemon as well. If using SSL/TLS you should update to at least
-       ngIRCd 14.1 (or newer)!
-</p>
 <h3 id="history">
        History
 </h3>
+<p class="security">
+       <strong>Caution:</strong>
+       ngIRCd 20, 20.1, and 20.2 contain an error that could crash
+       the server daemon when the configuration option <q>NoticeAuth</q> is
+       enabled (which is <em>not</em> the default).
+       ngIRCd 20 and 20.1 both contain an additional error that allows
+       arbitrary users to crash the server daemon.
+       <strong>All installations should be updated to version 20.3 or
+       newer!</strong>
+</p>
 <p>
        The <a href="doc/NEWS">NEWS</a>-file and the
        <a href="doc/ChangeLog">ChangeLog</a>
@@ -37,4 +39,3 @@
 <?php
        end_page();
 ?>
-