Security enhancements and problems solved with 3.8.8

Hello,

a client of mine asked me about this line in the release statement:

NEW FEATURES AND MAJOR CHANGES

  • Aaron Sigel performed a security audit of RT and pointed out
    a number of potential improvements which have been addressed

and wants to know what exactly is improved so he can evaluate if an upgrade would be benefical,

is there somewhere a list of this security audit problems?

thanks,

best regards
Ray