We're happy to announce a couple new releases of Review Board tonight.
Both 1.6.18 and 1.7.12 focus on further security lockdowns and fixes. We've had some great testing and reports from a couple of our very security-savvy users, and we'll be continuing to put out new releases as they find more.
Those running public installs should update, and should also read our guide on securing file attachments.
None of the issues found have been seen in the wild. We've also been in contact with administrators of some of the larger public Review Board installations about our findings. If you run a public install and would like to be kept informed of any new security updates, please let us know.
Now, that's not all that 1.7.12 brings. We also have some new improvements for extension writers that are helpful to those writing larger extensions. This is all in preparation for some major improvements coming in 1.8. There's also a few bug fixes, such as a much-requested fix to the "Show Whitespace Changes" toggle.