rt-3.8.13

I'm happy to announce that RT 3.8.13 is now available.

http://download.bestpractical.com/pub/rt/release/rt-3.8.13.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-3.8.13.tar.gz.sig

SHA1 sums

adc7dab25a6454e47a9386f7d7aa8091b4ef46ca  rt-3.8.13.tar.gz
199c36836d777115f7bd49cb27fec4e4410fd5dd  rt-3.8.13.tar.gz.sig

This release contains an important bugfix over the 3.8.12 security
release:

• Fix sending email with the 'perl-script' mod_perl handler, by
  ensuring that STDIN was always on FD 0 before calling IPC::Open2.
  This failure showed as either SIGPIPE or abnormal exit codes when
  running sendmail.
• Fix for "Undefined value assigned to typeglob" and "Bad file
  descriptor: core_output_filter" errors caused by the above change, by
  ensuring that both FD 0 and FD 1 are prevented from being claimed by
  Apache. This error only arose with the perfork MPM and mod_perl <=
  2.0.4.

A complete changelog is available from git by running:
git log rt-3.8.12..rt-3.8.13

rt-4.0.6

RT 4.0.6 contains important security fixes, in addition to bugfixes.

http://download.bestpractical.com/pub/rt/release/rt-4.0.6.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-4.0.6.tar.gz.sig

SHA1 sums

f5c0dd16da21f0af8e9c093057aa58cbab08d06b  rt-4.0.6.tar.gz
1f862bbb1b335cd036d1c32c10d80f26e4ce99a1  rt-4.0.6.tar.gz.sig

This release, in addition to being a bugfix release, also resolves a
number of security vulnerabilities. It resolves CVE-2011-2082,
CVE-2011-2083, CVE-2011-2084, CVE-2011-2085, CVE-2011-4458,
CVE-2011-4459, and CVE-2011-4460.

• Remove CSS3PIE, which simply added rounded corners on IE7 and IE8, as
  it was causing numerous crashes of IE.
• Show the current status in the status dropdown during ticket update,
  to allow forced setting of the status. This functionality was
  available in RT 3.8, and is now being reinstated.
• Use SearchBuilder queue limits to restrict what statuses and owners
  are displayed in drop-downs.
• Make "New Ticket" a top-level SelfService menu item.
• Display Lifecycle column correctly in queue admin lists.
• Allow >64k attributes on MySQL; this is particularly useful for
  logos uploaded via the theming editor.
• Remove two dependencies from the RT mailgate.
• Adding new arbitrary links to tickets now works as expected in the
  REST interface.
• Subject: lines in Forward Ticket templates are now respected.
• Sort ticket link numbers numerically, not alphabetically.
• Ticket reminders are no longer copied when creating a linked ticket;
  article and http:// links now are, however.
• Use relative links (with no hostname) more consistently.
• Correctly deal with non-ASCII attachment filenames which make use of
  MIME parameter value continuations.
• Find queue-level CFs first in REST interface when there are
  duplicates by name.
• Fix graphing of searches which reference Updated and other
  transaction-based limits.
• Reminder statuses on open and resolve are now configurable
  per-lifecycle.
• Fix quoting of CF names containing dashes and the like in the
  SearchBuilder.
• Bump URI dependency to ensure utf8 URLs are correclty generated in
  Dashboard emails.
• Permit and language attributes when scrubbing HTML.

A complete changelog is available from git by running:
git log rt-4.0.5..rt-4.0.6

rt-3.8.12

This release of RT contains important bugfixes and security updates.
You can download it from:

http://download.bestpractical.com/pub/rt/release/rt-3.8.12.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-3.8.12.tar.gz.sig

SHA1 sums

aa657de2fd687c51f31216df6dc1f639a0bc1f7c  rt-3.8.12.tar.gz
1da5db780c40455ceeb9a6099364f2bb977271a6  rt-3.8.12.tar.gz.sig

This release, in addition to being a bugfix release, also resolves a
number of security vulnerabilities. It resolves CVE-2011-2082,
CVE-2011-2083, CVE-2011-2084, CVE-2011-2085, CVE-2011-4458,
CVE-2011-4459, and CVE-2011-4460.

• Upgrade prototype.js to version 1.7, for compatibility with google
  charts.
• Remove ie7.js, which is no longer used.
• Ensure that TransactionBatch scripts are only run once.

A complete changelog is available from git by running:
git log rt-3.8.11..rt-3.8.12

rt-4.0.5

I'm happy to announce that RT 4.0.5 is now available for testing.

http://download.bestpractical.com/pub/rt/release/rt-4.0.5.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-4.0.5.tar.gz.sig

SHA1 sums

59697fbfa3876d1950499796a429622941272edf  rt-4.0.5.tar.gz
a9040dfb1ae59f872727564709186fbdecaffe1c  rt-4.0.5.tar.gz.sig

This release contains a number of bugfixes and small improvements since
the 4.0.4 release; a few of the more notable ones include:

• Greatly improved print CSS
• New Config option - HideResolveActionsWithDependencies removes
  actions such as Resolve from the action menu on tickets with
  outstanding dependencies
• New Config option - AutocompleteOwnersForSearch allows admins to force
  an Owner autocompleter in the Query Builder
• New Config option - NoTicketInterfaceForApprovals redirects users to
  the Approvals interface if they visit an Approval ticket in the
  regular RT UI
• Improved Simple Search documentation and new 'any' keyword for any
  status
• Improved case insensitivity in the User and Custom Field Autocompleters
• new --enable-ssl-mailgate configure option and rt-mailgate options
  to assist with setting rt-mailgate up to talk to your ssl enabled
  RT server
• More improvements to email quote detection to handle Outlook quoting
• The CreateTickets action now supports adding Groups as Watchers
• httpurl_overwrite no longer inserts spaces into your URLs
• Added NBSP as a search column in the Query Builder
• Maintain Approved/Denied state in the radio button on past Approvals
• Fixes for Bookmarked ticket searches
• Bugfixes for OverrideOutgoingMailFrom and sending bounces
• More consistent ordering of Articles
• Improvements to menu internals, including fixes for Search collections
  and localization of key names
• Preserve Content-Disposition when redistributing mail
• Improved PGP handling for .asc attachments with misleading content-types
• By default, RT's session cookie will not be available to javascript
• Allow Charts to be grouped by Told.
• Test and localization cleanups.

A complete changelog is available from git by running git log rt-4.0.4..rt-4.0.5

rt-4.0.4

RT 4.0.3 contained a serious bug wherein upgrades from any version of
RT 3 to RT 4.0.3 broke template interpolation; please do not use it. If
you had previously upgraded from RT 3 to RT 4.0.0, 4.0.1, or 4.0.2,
before upgrading to RT 4.0.3, you are not affected by this bug.

If you are currently running RT 4.0.3 and are affected by this issue,
upgrading to RT 4.0.4 will resolve it.

http://download.bestpractical.com/pub/rt/release/rt-4.0.4.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-4.0.4.tar.gz.sig

SHA1 sums

4a998b518a181fb36d380cbd762610478027c655  rt-4.0.4.tar.gz
d80fcd7e722a7f36892b1ca53673b34972363c2c  rt-4.0.4.tar.gz.sig

rt-4.0.3

I'm happy to announce that RT 4.0.3 is now available.

http://download.bestpractical.com/pub/rt/release/rt-4.0.3.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-4.0.3.tar.gz.sig

SHA1 sums

3719237973df81f7e1b0a31f034b03ed1cc8f98e  rt-4.0.3.tar.gz
adae5494fa99bdc83073e0cb394c6a5630a37ca9  rt-4.0.3.tar.gz.sig

This release contains a number of bugfixes and small improvements since
the 4.0.2 release; a few of the more notable ones include:

• Due to a change in RT 3.8.9, which also affected RT 4.0.0 and higher,
  TransactionBatch scrips were run twice; this has now been fixed.
• A new toggle has been added to expand all quote folding in a ticket's
  transaction history.
• New "On Forward", "On Forward Transaction" and "On Forward Ticket"
  conditions have been added.
• Ticket searches no longer forget which saved search they were loaded
  from when being updated.
• A new "make jsmin" target has been added to aid in downloading,
  compiling, and installing jsmin.
• Improved threading for automatically generated emails concerning a
  ticket.
• Improved detection of Outlook-style message fowarding headers.
• No longer error when a user has supplied a non-existant RT style;
  instead, fall back to the default. This is particularly relevant for
  users coming RT 3.8 with the 3.6 stylesheet applied, which no longer
  exists in 4.0.
• Improved handling of files named "0", and Unicode filenames, in file
  uploads.
• Tickets can no longer be linked to deleted tickets.
• Restore missing menus on simple search result pages.
• Fix support for perl 5.12 and later by removing a deprecated use of
  "defined %hash".

A complete changelog is available from git by running git log rt-4.0.2..rt-4.0.3

rt-3.8.11

I'm happy to announce that RT 3.8.11 is now available.

http://download.bestpractical.com/pub/rt/release/rt-3.8.11.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-3.8.11.tar.gz.sig

SHA1 sums

96fe9babdca88224d6c8f2352f08bd62d613770d  rt-3.8.11.tar.gz
ac1c9c712842c3a9aeb17357007e73aae4a21d1c  rt-3.8.11.tar.gz.sig

This release contains a number of bugfixes and minor security updates
since the 3.8.10 release, most notably:

• Adjust FCGI dependency to one which resolves FCGI's CVE-2011-2766
• New WebHttpOnlyCookies option, enabled by default, which hides RT's
  cookie from direct Javascript access.
• Compatibility with perl 5.12 and 5.14, by removing deprecated "for
  qw(...)" and "defined %hash" syntax.
• MySQL 5.5 compatibility, by specifying ENGINE=InnoDB rather than
  TYPE=InnoDB
• Ensure that RT::Interface::Web's _Overlay, _Local, and _Vendor files
  are loaded correctly.
• Fix session cleaner for on-disk sessions, broken since 3.8.0.
• Ensure that only one "Based on" attribute is stored for each custom
  field.
• Fix the loading of Shredder plugins, broken in 3.8.10.

A complete changelog is available from git by running git log rt-3.8.10..rt-3.8.11

rt-4.0.2

I'm happy to announce that RT 4.0.2 is now available.

http://download.bestpractical.com/pub/rt/release/rt-4.0.2.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-4.0.2.tar.gz.sig

SHA1 sums

224892197ea64598ab9d5ee7dab90fa5723ddc05  rt-4.0.2.tar.gz
e64614c2092c9ec0968b307417c937ee0d01624c  rt-4.0.2.tar.gz.sig

Continuing with our goal of faster release cycles and smaller changes
between releases in a stable series, this release primarily contains
fixes for a number of minor bugs. It also includes documentation
updates and removal of an inefficient javascript minification option.
Notable changes include:

• Ability to reference global CFs by Name in RT::Action::CreateTickets
• Installation of the docs/ directory into /opt/rt4/docs
• Removal of the incomplete --binary flag option for the full-text
  search indexer
• Fixes for a regression that caused group dashboards to vanish after
  creation and not appear in the list of dashboards
• Rewritten forward functionality to generate mail that better
  represents the original messages received by RT
• Removal of the pure Perl Javascript::Minifier module which slowed down
  the first request to new webserver children. jsmin or another
  external minifier is now required to minify RT's javascript. Refer to
  the section about $JSMinPath in perldoc /opt/rt4/etc/RT_Config.pm
  for how to configure jsmin.

A complete changelog is available from git by running git log rt-4.0.1..rt-4.0.2 on the stable (4.0-trunk) branch.

rt-4.0.1

I'm happy to announce that RT 4.0.1 is now available.

http://download.bestpractical.com/pub/rt/release/rt-4.0.1.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-4.0.1.tar.gz.sig

SHA1 sums

d53bef5fbf9d4ed4536e626eed0b79a502d643a9  rt-4.0.1.tar.gz
130bc0eeb49a951bd34ab4451980875fbfb21808  rt-4.0.1.tar.gz.sig

This release is a bugfix release. It contains a number of notable fixes
identified since the 4.0.0 release:

• Fixes for MySQL+Sphinx and native PostgreSQL full text search, and
  improved documentation.
• Javascript to forbid running RT in a frame, to prevent clickjacking
  attacks.
• Better detection and hinting of common web path misconfigurations.
• Minified javascript with an external jsmin now works in fastcgi and
  mod_perl deployments. This requires that mod_perl deployments switch
  to 'SetHandler modperl'; see docs/web_deployment.pod .
• Javascript fixes for IE8 in the admin UI.
• Multiple warning fixes during the upgrade process.
• Removed previously missed rights related to right delegation.

You will also find a new tarball, rt-4.0.1-third-party-source.tar.gz
This contains the uncompiled source of any code that we ship (such as
the minified source of jQuery).

rt-4.0.0

Today we're releasing RT 4.0.0. This release represents over a year
of hard work and more than 2000 commits. With a new major version
number, we took this opportunity to tidy up some of the older bits of RT
and allow us to grow features through the RT 4 series. We hope you'll
find it a worthy successor to RT 3.

Many, but not all, of our new features are the result of work done for
clients. Enhanced full-text search, the integration of RTFM as
Articles, refreshed ticket create and update pages, better control of
ticket notifications, Lifecycles, and quote-folding of emails in ticket
display all began life as extensions we built for clients.

We've also heard your requests in the form of feature requests, bug
reports and patches and they've driven our new theme for RT 4, a new
logo and theme editor, new custom field types and display options, the
mobile UI and reorganized and revised documentation. As a result of
your feedback, we also fixed hundreds of bugs and improved performance.

With so many changes by 16 authors over the course of a year, it would
be hard to summarize everything we added, fixed or improved. Over the
next few weeks, we'll be posting a series of articles on what's new in
RT 4.0 to http://blog.bestpractical.com. A list of new features in RT
4.0 is also available at http://bestpractical.com/rt/whats-new-in-4.html.

If you'd like to explore all of the changes we've made in the run up to
4.0.0, visit https://github.com/bestpractical/rt/

Download

http://download.bestpractical.com/pub/rt/release/rt-4.0.0.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-4.0.0.tar.gz.sig

SHA1 Sums

b2cf8d2ceb8bf97e5eeb08cb7d05760ca148df9f  rt-4.0.0.tar.gz
5a6b04bf9bb6437b74138bc6ad7eabae39d36e6d  rt-4.0.0.tar.gz.sig

We've done our best to ensure that upgrading from RT 3 to RT 4.0 will
be as smooth as possible for you. If you have questions as you upgrade,
please don't hesitate to write to [email protected] for
community support. If you'd rather have professional support from the
folks who built RT, drop us a line at [email protected].

We've talked our sales team into including free basic upgrades from RT 3
to RT 4 if you sign up for a new RT 4 support contract within the next
two months. The new RT 4 support contracts are less expensive and come
with lots of great new features. http://bestpractical.com/services/support.html