RTIR: RT for Incident Response

RTIR 5.0.10 Release Notes

RTIR 5.0.10 -- 2026-05-20
=========================

RTIR 5.0.10 is now available for general use. The list of changes
included with this release is below. When upgrading RTIR, you should
also upgrade RT to version 5.0.10 for compatibility with this release
and to get the security fixes and other improvements in RT 5.0.10.

Note that there was no RTIR 5.0.9 public release.

https://download.bestpractical.com/pub/rt/release/RT-IR-5.0.10.tar.gz
https://download.bestpractical.com/pub/rt/release/RT-IR-5.0.10.tar.gz.asc

SHA-256 sums

b99d35e5e7730ce1ac99719b995a5e6756993986b3f90b8748867a9e68fcbd55  RT-IR-5.0.10.tar.gz
327413d1eb75668d8894af8835f9f4c1a91d1cf3d574924034b07d7f74312699  RT-IR-5.0.10.tar.gz.asc

General user features

* Handle invalid SQL queries gracefully on search pages instead of
  showing an error
* Quote Lookup search terms for full-text search to avoid
  misinterpretation of special characters in MySQL/MariaDB and Oracle
* Remove the defunct Bugtraq feed from the default Feeds configuration
  and add a CISA feed in its place
* Stop passing Rows from the DueIncidents widget to the search results
  page for consistency with saved searches

Internals

* Update Module::Install::RTx to 0.45 and ensure RT::IR is enabled
  before "make initdb"
* Remove an unused attachments form line left over from an older
  refactor
* Update GitHub actions to use Node 20

Testing

* Add tests for OurQuery handling invalid SQL gracefully
* Add tests for email and host lookup tools with full-text search
  enabled
* Update GitHub actions Dockerfile to match current RT 5


A complete changelog is available from git by running:
    git log 5.0.8..5.0.10
or visiting
    https://github.com/bestpractical/rtir/compare/5.0.8...5.0.10