RT 3.8.12 Released - Security Release

Alex Vandiver <[email protected]> Tue, 22 May 2012 10:37:09 -0400
Newsgroups gmane.comp.bug-tracking.request-tracker.announce
Organization Best Practical Solutions, LLC
Message-ID <[email protected]>
--===============2090964163==
Content-Type: multipart/signed; micalg="pgp-sha1"; protocol="application/pgp-signature"; boundary="=-LYT1p9pQ3qOS8TbF7XUe"


--=-LYT1p9pQ3qOS8TbF7XUe
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

This release of RT contains important bugfixes and security updates.
You can download it from:

http://download.bestpractical.com/pub/rt/release/rt-3.8.12.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-3.8.12.tar.gz.sig

SHA1 sums

aa657de2fd687c51f31216df6dc1f639a0bc1f7c  rt-3.8.12.tar.gz
1da5db780c40455ceeb9a6099364f2bb977271a6  rt-3.8.12.tar.gz.sig

This release, in addition to being a bugfix release, also resolves a
number of security vulnerabilities.  It resolves CVE-2011-2082,
CVE-2011-2083, CVE-2011-2084, CVE-2011-2085, CVE-2011-4458,
CVE-2011-4459, and CVE-2011-4460.

 * Upgrade prototype.js to version 1.7, for compatibility with google
   charts.
 * Remove ie7.js, which is no longer used.
 * Ensure that TransactionBatch scripts are only run once.

A complete changelog is available from git by running:
  git log rt-3.8.11..rt-3.8.12

 - Alex

--=-LYT1p9pQ3qOS8TbF7XUe
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEABECAAYFAk+7pJUACgkQMflWJZZAbqBumwCfRsBPU0ySUR7crSraq7JKgz40
lvMAoKmy1t0hG0asPN2l/YvmshJN54Ao
=+n7A
-----END PGP SIGNATURE-----

--=-LYT1p9pQ3qOS8TbF7XUe--


--===============2090964163==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
rt-announce mailing list
[email protected]
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-announce

--===============2090964163==--