[rt-announce] RT 3.8.11 released

[Alex Vandiver]

I'm happy to announce that RT 3.8.11 is now available.

http://download.bestpractical.com/pub/rt/release/rt-3.8.11.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-3.8.11.tar.gz.sig

SHA1 sums

96fe9babdca88224d6c8f2352f08bd62d613770d  rt-3.8.11.tar.gz
ac1c9c712842c3a9aeb17357007e73aae4a21d1c  rt-3.8.11.tar.gz.sig

This release contains a number of bugfixes and minor security updates
since the 3.8.10 release, most notably:

 * Adjust FCGI dependency to one which resolves FCGI's CVE-2011-2766

 * New WebHttpOnlyCookies option, enabled by default, which hides RT's
   cookie from direct Javascript access.

 * Compatibility with perl 5.12 and 5.14, by removing deprecated "for
   qw(...)" and "defined %hash" syntax.

 * MySQL 5.5 compatibility, by specifying ENGINE=InnoDB rather than
   TYPE=InnoDB

 * Ensure that RT::Interface::Web's _Overlay, _Local, and _Vendor files
   are loaded correctly.

 * Fix session cleaner for on-disk sessions, broken since 3.8.0.

 * Ensure that only one "Based on" attribute is stored for each custom
   field.

 * Fix the loading of Shredder plugins, broken in 3.8.10.

A complete changelog is available from git by running `git log
rt-3.8.10..rt-3.8.11`

 - Alex