[rt-announce] RT 3.8.12 Released - Security Release

Alex Vandiver alexmv at bestpractical.com
Tue May 22 10:37:09 EDT 2012


This release of RT contains important bugfixes and security updates.
You can download it from:

http://download.bestpractical.com/pub/rt/release/rt-3.8.12.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-3.8.12.tar.gz.sig

SHA1 sums

aa657de2fd687c51f31216df6dc1f639a0bc1f7c  rt-3.8.12.tar.gz
1da5db780c40455ceeb9a6099364f2bb977271a6  rt-3.8.12.tar.gz.sig

This release, in addition to being a bugfix release, also resolves a
number of security vulnerabilities.  It resolves CVE-2011-2082,
CVE-2011-2083, CVE-2011-2084, CVE-2011-2085, CVE-2011-4458,
CVE-2011-4459, and CVE-2011-4460.

 * Upgrade prototype.js to version 1.7, for compatibility with google
   charts.
 * Remove ie7.js, which is no longer used.
 * Ensure that TransactionBatch scripts are only run once.

A complete changelog is available from git by running:
  git log rt-3.8.11..rt-3.8.12

 - Alex
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://lists.bestpractical.com/pipermail/rt-announce/attachments/20120522/fb0f00b8/attachment.pgp>


More information about the rt-announce mailing list