https://seclists.org/oss-sec/2026/q3/728: Fwd: UnalIRCd 6.2.7 leased & hot-patch to fix security issues for existing installations

Published Sep 13, 2026

Updated

Affected Software

1 affected component

UnrealIRCd UnrealIRCd=6.2.7

Frequently Asked Questions

Are default installations likely to expose the affected interfaces?

WebSockets and JSON-RPC are not enabled by default. Installations that have explicitly enabled either feature should be prioritized for review.

What can be done when a full upgrade and restart cannot be scheduled immediately?

Apply the available hot patch by running ./unrealircd hot-patch webserver-header-dos. The announcement identifies this as a fix without restarting the server.

What is the complete remediation path?

Upgrade to the UnrealIRCd 6.2.7 release, which requires a restart. The release also includes updated shipped libraries, including c-ares 1.34.8 with security fixes.

https://seclists.org/oss-sec/2026/q3/728: Fwd: UnalIRCd 6.2.7 leased & hot-patch to fix security issues for existing installations

Affected Software

Frequently Asked Questions

Are default installations likely to expose the affected interfaces?

What can be done when a full upgrade and restart cannot be scheduled immediately?

What is the complete remediation path?

Company

Resources

Contact

Frequently Asked Questions

Are default installations likely to expose the affected interfaces?

What can be done when a full upgrade and restart cannot be scheduled immediately?

What is the complete remediation path?