I’m unsure what version of FCKEditor is included with RT 3.8.4. Is
the version of FCKEditor less than 188.8.131.52?
There is a potential advisory out for FCKEditor 184.108.40.206 and less:
We ship 2.6.4, but we haven’t included the filemanager directory
in 3.8.2, 3.8.3 or 3.8.4.
We don’t support any of the FCKEditor file management
code paths, so we disabled them.
Those versions of RT shouldn’t be affected by this security report,
and if you’re running 3.8.0 or 3.8.1 there have been a ton of bugfixes
in our FCKEditor support so an upgrade is recommended.
We’ll roll 220.127.116.11 in before we release 3.8.5, I’ve created
to make sure it is tracked
PGP.sig (194 Bytes)