RT: Request Tracker

RT 3.6.10 Release Notes

This is a security release of RT.
It includes a fix for the session fixation vulnerability detailed in the following announcements:

You can download it here:


SHA1 sums

145124d3ce7dcae76a935f9ce373825ca5fb6e7d  rt-3.6.10.tar.gz
4322f23057c14296ece60dc9f8e242ba5ea2a155  rt-3.6.10.tar.gz.sig

A complete list of changes since 3.6.9 is included below.


commit 81f0759f2852c5b3950f48849300eed5a7166f7f
Author: Alex Vandiver <alexmv@bestpractical.com>
Date:   Wed Sep 30 17:07:24 2009 -0400

    Remove references to .svn

commit e28bfabe51ad2b53ca33a7328d3bd6a202d504d8
Author: Alex Vandiver <alexmv@bestpractical.com>
Date:   Wed Sep 30 17:08:29 2009 -0400

    Remove old and incorrect releng.cnf

commit e82d5f9b82ebbe3f6556d5ad3bda44f9476d6864
Author: Alex Vandiver <alexmv@bestpractical.com>
Date:   Tue Oct 6 14:18:44 2009 -0400

    Use spaces instead of tabs in commands, otherwise copy-and-paste in the terminal can fail

commit b157bae9d06e22c8cdbc6d1c74e93ae586bd37db
Author: Alex Vandiver <alexmv@bestpractical.com>
Date:   Tue Oct 6 14:27:26 2009 -0400

    Add .gitignore from 3.8-trunk

commit a8f7dccfb53118c950cc8bebff3e64c069c978a7
Author: Kevin Falcone <falcone@bestpractical.com>
Date:   Mon Nov 30 13:45:26 2009 -0500

    Apply patch for session fixation vulnerability (CVE-2009-3585)