SILC Server 1.0.3

[Patrik Weiskircher]

SILC Server 1.0.3 Release Notes
================================

The new version of the SILC Server is now available!  The source package
of the software is available from the following sources:

          http://silcnet.org/
          ftp://ftp.silcnet.org/

This version fixes a denial of service vulnerability.
Upgrading is very recommended.


Summary of Changes
------------------

   o Fixed a denial of service vulnerability: If invalid hmac or cipher
     was specified on joining a channel, server crashed.

The full list of changes is available on the website and in CHANGES file
in the source package.


Installation
------------

The source package is compiled and installed as instructed in the INSTALL
file found from the package.  Quick installation:

    ./configure
    make
    make install


Known Issues
------------

- Known Issues in SILC Server

    - Two or more servers with same IP must not be linked to same network,
      even if server ports are different.  This is limitation in current
      implementation and may cause desync problems in the network.

    - Adding or removing listenning interfaces (secondary interfaces in
      silcd.conf) does not work in rehash (rehash is kill -HUP <server
PID>).
      Changing listenning interfaces requires reboot of the server.

    - Router to router connections may not work as expected.