RT 6.0.3 is now available for general use. This release addresses several security issues and it is recommended that all users upgrade as soon as possible. Our documentation site has notes on upgrading from earlier versions and detailed release notes, including information on security fixes.
In addition to the security updates, this release includes many new features and updates. Saved searches on dashboards now support pagination and sorting. Statuses can be assigned colors in the lifecycle configuration. Accessibility is improved, especially with keyboard menu navigation. The default custom field display is now multi-column, making it more dense, showing more information above the fold. And there are many more updates, improvements, and optimizations.
Note: Missed Patch for TSV Export Header Injection
After the release of RT 6.0.3, we discovered that a fix for spreadsheet injection via
TSV export headers was included in RT 5.0.10 but inadvertently left out of RT 6.0.3.
The patch below completes the mitigation for CVE-2026-41073. We recommend all RT 6.0.3 users apply the following patch, which will be included in RT 6.0.4:
https://github.com/bestpractical/rt/commit/525547751b76cc422015960bae3056f4e8d4351f.patch
Full RT 6.0.3 download links:
https://download.bestpractical.com/pub/rt/release/rt-6.0.3.tar.gz
https://download.bestpractical.com/pub/rt/release/rt-6.0.3.tar.gz.asc
SHA-256 sums
117b53e7a46e82ade662050d98920f1255865ca873d6bec80036085b17dd3dc6 rt-6.0.3.tar.gz
551d62dc23a2b3a7f06b97f6fd09bd0ecc617a1b8949697b166c0865ffc45348 rt-6.0.3.tar.gz.asc
Watch our blog in the coming weeks for more details on the new features.
Happy upgrading!
