RT 4.2.12 released

--===============0106654805==
Content-Type: multipart/signed; boundary="Apple-Mail=_DFBB4AE5-5EB5-470E-9FD8-65463ADF9E7A"; protocol="application/pgp-signature"; micalg=pgp-sha256


--Apple-Mail=_DFBB4AE5-5EB5-470E-9FD8-65463ADF9E7A
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

RT 4.2.12 -- 2015-08-12
-----------------------

RT 4.2.12 contains important security fixes.

https://download.bestpractical.com/pub/rt/release/rt-4.2.12.tar.gz
https://download.bestpractical.com/pub/rt/release/rt-4.2.12.tar.gz.asc

SHA1 sums

ddbf70752c2b96354caf7687534addf075859d4d  rt-4.2.12.tar.gz
8e76c69a56a60afbe0a75673874a1f4510355350  rt-4.2.12.tar.gz.asc

This release is a security release which addresses the following
vulnerabilities:

RT 4.0.0 and above are vulnerable to a cross-site scripting (XSS) attack =
via
the user and group rights management pages.  This vulnerability is =
assigned
CVE-2015-5475.  It was discovered and reported by Marcin Kope=C4=87 at =
Data Reliance
Shared Service Center.

RT 4.2.0 and above are vulnerable to a cross-site scripting (XSS) attack
via the cryptography interface.  This vulnerability could allow an =
attacker
with a carefully-crafted key to inject JavaScript into RT's user =
interface.
Installations which use neither GnuPG nor S/MIME are unaffected.


A complete changelog is available from git by running:
    git log rt-4.2.11..rt-4.2.12
or visiting
    https://github.com/bestpractical/rt/compare/rt-4.2.11...rt-4.2.12


--Apple-Mail=_DFBB4AE5-5EB5-470E-9FD8-65463ADF9E7A
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----

iQIcBAEBCAAGBQJVy6GWAAoJEDdW4lQxRAUgkSMP/0Mbjq189+lKpyj8WVfM8b8L
KVDbZO+OjbNi0csVGLeJD9KV8OipLPSRJb/qKKjiAh5Np/ogl/5Zu95//Q/V0zec
Ri+OthsR+Vd/voFbevTjmCWG/pbm+ELJRnR+tJceIcr/LLk4GDDgjGrSO78v8v2l
qkUm/RFRguO3OGTJdwIBqruBPccz9SkQEUqj9cQpeyVuscDeBU3E2JZsWGFFATi1
9ids7937xPW+/dlX30U3JsQOSjx7Ppu0mmVFxNIy/tWwebyFfoxEjJLWtUg1UrNB
50qWCry85Qqj30d9IhZ7QNXrWF/fo7Lsa3N+cad01a03G98oKaEeloQKsTNAVKID
b2PY0nW8GVhBPwsSVSyqFCcAGoU8un2sbK89HpG2ZjPn0lEKEtNo5DKKQzSpTgtz
kB306Upl8B5sxT1qESI9SxhJ1teBAj31hhuj4wHK0GenNZ5cz2/S7uTmDA6vOFBa
YizHzGUXHzMP3uTL0OzdaKHoE8tzw2fR9M6LL93XoiubUwKIRFP2argF5hbed3JJ
ace02js13Lcs2EKpqbBzBbEjC4sKijhv0VcbSEPjs+RclWeAOKNlleYjtwjcIPal
sRJ1z+hDplhejvctcsmE823A3WzTT1PU1nKxEtYjXBehr51aHb/t9+SSrydI/gUX
KQvIG28AHrjm+7Et0Hhh
=FgeC
-----END PGP SIGNATURE-----

--Apple-Mail=_DFBB4AE5-5EB5-470E-9FD8-65463ADF9E7A--

--===============0106654805==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
rt-announce mailing list
[email protected]
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-announce

--===============0106654805==--