RT 3.6.11 Released - Security Release

RT-Announce mailing list

Please keep replies to the list.

The initial security announcement explains what vulnerabilities apply
to various RT releases. You can find a copy of that announcement on
our blog:
http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.htmlOn Thu, Apr 14, 2011 at 11:07:56AM -0400, Todd Chapman wrote:

This applies to all 3.6.x?

On Thu, Apr 14, 2011 at 10:01 AM, Kevin Falcone falcone@bestpractical.com wrote:

This is a security release of RT. It resolves CVE-2011-1686,
CVE-2011-1687, CVE-2011-1688, CVE-2011-1689, and CVE-2011-1690.

You can download it here:


SHA1 sums

5cd0143cae8f1400e8c82370f2626f9989b02673 rt-3.6.11.tar.gz
126daf79864c1a48ee743b43ff70c5cb4dda5141 rt-3.6.11.tar.gz.sig