upgrade to 2.8.9; BNC contains an input validation flaw which might allow a remote attacker to issue arbitrary IRC related commands.