Open Source IRC Server, serving thousands of networks since 1999. Also at Mastodon at https://xitter.gq/t.co/r0WiBWKslb
Worldwide
Joined June 2015
- Tweets257
- Following2
- Followers313
- Likes16
⚠️ We are now seeing attempts by bad guys to actively exploit CVE-2026-114713 in UnrealIRCd on the internet. If you have not hot-patched or upgraded, do so ASAP! #IRC
UnrealIRCd 6.2.7.1 and hot-patch released: this fixes 9 security issues, including 1 CRITICAL (CVE-2026-114713).
We suggest first deploying the SPAMFILTER workaround and then running the hot-patch command.
See forums.unrealircd.org/viewto… for all details. #IRC
UnrealIRCd 6.2.7.1 and hot-patch released: this fixes 9 security issues, including 1 CRITICAL (CVE-2026-114713).
We suggest first deploying the SPAMFILTER workaround and then running the hot-patch command.
See forums.unrealircd.org/viewto… for all details. #IRC
UnrealIRCd 5 is also affected by the critical bug. Other issues go back to 3.2.x. Please understand that running End Of Life versions is a BAD idea.
See end of forums.unrealircd.org/viewto… "Note to UnrealIRCd 5 and other EOL versions" and "Final words: the danger of AI is real"
Heads up: on Sat 7-Nov-2026 15:00 UTC we will release 6.2.7.1 along with a hot-patch for UnrealIRCd 6 (no restart needed). This fixes multiple security issues, including 1 rated as CRITICAL.
Please be around at that time. Check forums.unrealircd.org/viewto… NOW for how to prepare.
The security issue from yesterday was assigned CVE-2026-90668. Instead of upgrading, admins can simply run:
./unrealircd hot-patch webserver-header-dos
We have been doing this for quite a while:
I wrote about 20 years of fixing UnrealIRCd security issues with no restart needed, and the times it didn't work: vulnscan.org/why-hot-patchin… #IRC #infosec
UnrealIRCd 6.2.7 is out to fix a security issue in the webserver, relevant if you are using Websockets or JSON-RPC.
For existing 6.2.x we suggest running this to fix the issue without requiring a restart:
./unrealircd hot-patch webserver-header-dos
See: forums.unrealircd.org/viewto…
Heads up: on Saturday 12-Sep-2026 14:00 UTC we will release 6.2.7 along with a hot-patch for UnrealIRCd 6.2.x, to fix a DoS issue.
We suggest admins to be around at that time. They can use the hot-patch to fix without downtime. Release will be posted at unrealircd.org.
This issue was discovered recently during an internal audit.
As a general advice, if you are an UnrealIRCd admin, we highly recommend you to subscribe at sourceforge.net/projects/unr… to be notified of releases.
UnrealIRCd 6.2.6 is out! 🎉
This release enables multiline by default, adds TKL IDs and TKL hit counts. A crash bug in multiline has been fixed as well. #IRC
Release notes: github.com/unrealircd/unreal…
Downloads: unrealircd.org.
To upgrade on *NIX: ./unrealircd upgrade
UnrealIRCd 6.2.6-rc1 is available for testing.
Multiline is now on by default, *LINE/Spamfilter IDs & hit counts, new crule functions, spkifp linking is now easier. #IRC
Release notes: github.com/unrealircd/unreal…
Downloads: unrealircd.org
*NIX: ./unrealircd upgrade --rc
UnrealIRCd 6.2.5 release & hot-patch ❗ Improves IPv6 clone detection.
If your IRC network has IPv6, hot-patching (no restart) or upgrading is highly recommended.
On 6.2.x: ./unrealircd hot-patch ipv6-clones
Details at forums.unrealircd.org/viewto… #IRC
UnrealIRCd 6.2.4 is out! 🎉 This release comes with optional multiline support and more. #IRC
👉 Release notes: github.com/unrealircd/unreal…
👉 Download: unrealircd.org
👉 *NIX: ./unrealircd upgrade
UnrealIRCd 6.2.4-rc1 is available for testing. Comes with optional multiline support and more. #IRC
👉 Release notes: github.com/unrealircd/unreal…
👉 Download: unrealircd.org/
👉 *NIX: ./unrealircd upgrade --rc
UnrealIRCd 6.2.3 is out! 🎉
New: soft bans in ban user { }, control SETIDENT/SETNAME usage, improved security hardening, EXTJWT docs. Also a bunch of fixes. #IRC
👉 Release notes: github.com/unrealircd/unreal…
👉 Download: unrealircd.org/
👉 *NIX: ./unrealircd upgrade
UnrealIRCd retweeted
I made a blog post about post-quantum cryptography, specifically on how "Harvest now, decrypt later" is a real threat, and what it means for IRC and UnrealIRCd. vulnscan.org/post-quantum-cr… #IRC #PQC
UnrealIRCd 6.2.3-rc2 is available for testing. Release notes are available on github.com/unrealircd/unreal…. Found any issues? Please report on bugs.unrealircd.org. #IRC
Downloads are on unrealircd.org. To upgrade to this RC on *NIX you can use: ./unrealircd upgrade --rc
UnrealIRCd retweeted
NEW STATS: #IRC server software in use on the Internet (based on 4991 publicly accessible servers):
#UnrealIRCd 37%, #InspIRCd 22%, ngircd 9%, Hybrid 7%, Ergo 7% (+2% compared to last year). See details at ircstats.org
Spam waves on IRC at the end of the year again. We have done our part in shielding the #IRC community from the first wave on Dec 24/25. Unfortunately no longer working on Dec 26. Using UnrealIRCd? Consider using CBL which is still highly effective: forums.unrealircd.org/viewto…
UnrealIRCd 6.2.2 is out! Fixes a few minor issues. If running 6.2.1 then no reason to upgrade. But if you are still running 6.0.x/6.1.x then we highly recommend to upgrade to 6.2.x in December. The 6.2.x series have proven to be stable and are a leap forward in terms of security.
See the "UnrealIRCd 6.2.2 released & wrapping up the year" post at the forums forums.unrealircd.org/viewto… for more info. #IRC
As always, you can download UnrealIRCd from unrealircd.org and on *NIX you can run ./unrealircd upgrade