From 6dc5471a758b75e58f3855f086f1e5ba1676d931 Mon Sep 17 00:00:00 2001 From: Alexander Barton Date: Fri, 23 Aug 2013 21:54:40 +0200 Subject: ngIRCd Release 20.3 (cherry picked from commit bb6e2779636aa6d74bbff474880829f0183a3c94) Conflicts: ChangeLog NEWS --- ChangeLog | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'ChangeLog') diff --git a/ChangeLog b/ChangeLog index 9fe53c7a..1186276b 100644 --- a/ChangeLog +++ b/ChangeLog @@ -102,6 +102,13 @@ ngIRCd 21 and then is used to output individual help texts to specific topics. Please see the file ./doc/Commands.txt for details. +ngIRCd 20.3 (2013-08-23) + + - Security: Fix a denial of service bug (server crash) which could happen + when the configuration option "NoticeAuth" is enabled (which is NOT the + default) and ngIRCd failed to send the "notice auth" messages to new + clients connecting to the server (CVE-2013-5580). + ngIRCd 20.2 (2013-02-15) - Security: Fix a denial of service bug in the function handling KICK -- cgit 1.4.1