We are pleased to announce that Request Tracker (RT) 6.0.3 and 5.0.10 are now available, along with matching releases of RT for Incident Response (RTIR) 6.0.3 and 5.0.10.
Both RT 6.0.3 and RT 5.0.10 address several security issues, and we recommend that all users upgrade as soon as possible. Full details, upgrade notes, and complete release notes are available on our documentation site, and each release has its own announcement on the forum:
Important for RT 6.0.3: a fix for spreadsheet injection via TSV export headers was included in RT 5.0.10 but inadvertently left out of RT 6.0.3. When you upgrade to RT 6.0.3, apply this patch as an additional step to pick up the fix. See the RT 6.0.3 forum announcement for details.
RT 6.0.3
In addition to the security fixes, RT 6.0.3 brings a number of new features and updates to the RT 6 series, including better dashboards, new lifecycle configuration, and continued accessibility improvements. We’ll be covering these in more detail in upcoming posts, so watch this space.
RT 5.0.10
RT 5.0.10 is a maintenance release with security fixes and bug fixes for the RT 5 series. It also improves inline CSS handling in the ticket history, balancing correct display of formatted HTML email against reasonable processing of very large messages on the server. RT 5 is now in maintenance mode, so if you’re looking for new features, this is a great time to plan your upgrade to RT 6.
RTIR 6.0.3 and 5.0.10
These RTIR releases contain a few bug fixes and compatibility updates. If you run RTIR, you should also upgrade RT to the matching version (6.0.3 or 5.0.10) for compatibility and to pick up the security fixes and other improvements. Note that there was no public RTIR 6.0.2 or RTIR 5.0.9 release, so these are the current releases for each series.
Staying current matters more than ever
Keeping software up to date has always been good practice, but it matters more now than ever. AI-assisted tools have increased both the volume and the frequency of newly discovered vulnerabilities, and that affects every layer of your stack: the operating system, system packages, and all of the software you run, including RT. The result is more patches to track and apply, and to apply sooner. Staying current is one of the most effective things you can do to keep your systems secure, and it may mean setting aside more time for patching and routine maintenance than you have in the past.
To make it easier to stay on top of RT updates specifically, here are the best ways to know when a new release or security fix is available:
- Request Tracker support customers receive early notification of all security issues, along with patches, ahead of public releases.
- New releases are announced on our forum. Subscribe to the Announcements category to be notified when each release is posted.
- Watch us on GitHub. Our GitHub organization has the RT and RTIR repositories pinned, so you can watch them directly to see when new releases are tagged and posted.
As always, if you’d like to leave upgrades, maintenance, and security to us, our team offers fully managed RT in the cloud as well as support for self-hosted installations. Contact us to learn more.
Leave a Comment