ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
oss-securitypublished ()ingested
Part of a story covered by 2 sources: “UnrealIRCd 6.2.7 release and hot-patch fix security issues, including MITM command injection in STARTTLS S2S upgrade” — merged summary and timeline →

Fwd: UnrealIRCd 6.2.7 released & hot-patch to fix security issues for existing installations

lowVulnerabilityimportance 15
AI summary · glm-5.3

Clarification: UnrealIRCd Websockets and JSON-RPC interfaces involved in 6.2.7 security fixes are disabled by default.

Sam James forwards the UnrealIRCd 6.2.7 release announcement and clarifies that neither Websockets nor JSON-RPC are enabled by default. This limits exposure of the security issues addressed by the release and accompanying hot-patch for existing installations.

  • UnrealIRCd 6.2.7 released with hot-patch for existing installs
  • Websockets and JSON-RPC are disabled by default
  • Default configurations not exposed to affected interfaces
Read the original
Tagsunrealircdircwebsockets-rpcpatchrelease
Full article

Posted by Sam James on Sep 12 Neither Websockets nor JSON-RPC are enabled by default. -------------------- Start of forwarded message -------------------- Date: Sat, 12 Sep 2026 15:41:14 +0200 Subject: UnrealIRCd 6.2.7 released & hot-patch to fix security issues for existing installations To: UnrealIRCd Release Announcements From: Bram Matthys via Unreal-notify Hi everyone,...

This source does not provide full text. Read it at seclists.org.