RT 4.0.13 contains important security fixes.
http://download.bestpractical.com/pub/rt/release/rt-4.0.13.tar.gz
http://download.bestpractical.com/pub/rt/release/rt-4.0.13.tar.gz.asc
SHA1 sums
d09f0b9beed8f4e7972fd43d5597e78306d9acef rt-4.0.13.tar.gz
94d1de447301c9be728197572aff2d29944bc39e rt-4.0.13.tar.gz.asc
This release of RT resolves a number of security vulnerabilities:
CVE-2012-4733
CVE-2013-3368
CVE-2013-3369
CVE-2013-3370
CVE-2013-3371
CVE-2013-3372
CVE-2013-3373
CVE-2013-3374
It also includes a database upgrade, so please make sure to run make upgrade-database.
Details about the above CVEs are available at:
http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html
A complete changelog is available from git by running:
git log rt-4.0.12..rt-4.0.13
or visiting
rt-4.0.12...rt-4.0.13