[Rt-devel] [Rt-announce] RT 3.6.11 Released - Security Release

Kevin Falcone falcone at bestpractical.com
Thu Apr 14 11:12:04 EDT 2011


Please keep replies to the list.

The initial security announcement explains what vulnerabilities apply
to various RT releases.  You can find a copy of that announcement on
our blog:
http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html

On Thu, Apr 14, 2011 at 11:07:56AM -0400, Todd Chapman wrote:
> This applies to all 3.6.x?
> 
> On Thu, Apr 14, 2011 at 10:01 AM, Kevin Falcone
> <falcone at bestpractical.com> wrote:
> > This is a security release of RT.  It resolves CVE-2011-1686,
> > CVE-2011-1687, CVE-2011-1688, CVE-2011-1689, and CVE-2011-1690.
> >
> > You can download it here:
> >
> > http://download.bestpractical.com/pub/rt/release/rt-3.6.11.tar.gz
> > http://download.bestpractical.com/pub/rt/release/rt-3.6.11.tar.gz.sig
> >
> > SHA1 sums
> >
> > 5cd0143cae8f1400e8c82370f2626f9989b02673  rt-3.6.11.tar.gz
> > 126daf79864c1a48ee743b43ff70c5cb4dda5141  rt-3.6.11.tar.gz.sig
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://lists.bestpractical.com/pipermail/rt-devel/attachments/20110414/c8b74449/attachment.pgp>


More information about the rt-devel mailing list