RT 4.0.24 released

--===============1838606292==
Content-Type: multipart/signed; boundary="Apple-Mail=_D73CE8BA-45CD-4E9D-9CD6-555C8A6A7705"; protocol="application/pgp-signature"; micalg=pgp-sha256


--Apple-Mail=_D73CE8BA-45CD-4E9D-9CD6-555C8A6A7705
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

RT 4.0.24 -- 2015-08-12
-----------------------

RT 4.0.24 contains an important security fix.

https://download.bestpractical.com/pub/rt/release/rt-4.0.24.tar.gz
https://download.bestpractical.com/pub/rt/release/rt-4.0.24.tar.gz.sig

SHA1 sums

0588b678cc1f13ae1504e9fffede1b8485d172f7  rt-4.0.24.tar.gz
8f8b69532112aa01d6fe540478de6a7046ad6fb0  rt-4.0.24.tar.gz.sig

This release is a security release which addresses the following
vulnerability:

RT 4.0.0 and above are vulnerable to a cross-site scripting (XSS) attack =
via
the user and group rights management pages.  This vulnerability is =
assigned
CVE-2015-5475.  It was discovered and reported by Marcin Kope=C4=87 at =
Data Reliance
Shared Service Center.


A complete changelog is available from git by running:
    git log rt-4.0.23..rt-4.0.24
or visiting
    https://github.com/bestpractical/rt/compare/rt-4.0.23...rt-4.0.24


--Apple-Mail=_D73CE8BA-45CD-4E9D-9CD6-555C8A6A7705
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----
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=rjx+
-----END PGP SIGNATURE-----

--Apple-Mail=_D73CE8BA-45CD-4E9D-9CD6-555C8A6A7705--

--===============1838606292==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
rt-announce mailing list
[email protected]
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-announce

--===============1838606292==--