Mailing List Archive

SECURITY: Trac 0.8.4 Released
Trac 0.8.4 Release Notes
========================
Jun 19, 2005

This release contains a security update, see "What's New" for more
information.

We're proud to present our latest release - Trac 0.8.4.

Trac is an enhanced wiki and issue tracking system, integrated with
Subversion, for software development projects. Trac uses a minimalistic
approach to web-based software project management. Our mission is
simple; to help developers write great software while staying out of the
way. Trac should impose as little as possible on a team's established
development process and policies.

Trac allows wiki markup in issue descriptions and commit messages,
creating links and useful structure between bugs, tasks, changesets,
files and wiki pages. A timeline view presents all project events in
chronological order, making tracking progress or getting an overview of
a project easy.

For more information, please visit the main Trac web site:

<http://trac.edgewall.com/>

The software, published under the GNU General Public License, is
available at:

<http://projects.edgewall.com/trac/download/>

Please report problems and provide feedback in the project issue tracker:

<http://projects.edgewall.com/trac/>

For questions, comments and user discussions, please use the Trac
mailing list
. List information, subscription and archive available at:

<http://projects.edgewall.com/trac/wiki/MailingList>

What's New
----------

This release contains a security update. Trac <= 0.8.3 could be tricked
into uploading files outside the environment directory. All users are
recommended to upgrade. Vulnerability found by the Hardened-PHP project.

For a more complete list of improvements, see the ChangeLog at:

<http://projects.edgewall.com/trac/wiki/ChangeLog>


About Edgewall
--------------
Edgewall is a highly experienced team of software developers specializing in
emerging internet and web technologies.

We build professional, innovative and creative solutions for the web
based on
open source components, operating systems and frameworks.

Specific areas of expertise include:

* Python development, including Python extensions and integration.
* Web services and application development.
* C and C++ application development for UNIX and Linux.
* Cross-platform application development and porting.
* Open Source development practices, methods and tools.

Edgewall also offers professional Trac support and consulting, including
customization, integration and custom feature development.

For more information, visit our web site at <http://www.edgewall.com/>
or email us at <mailto:info@edgewall.com>.

Acknowledgements
----------------
Many thanks to the growing number of people who have, and continue to,
support the project. Also our thanks to all people providing feedback
and bug
reports that helps us make Trac better, easier to use and more effective.

Without your invaluable help, Trac would not evolve. Thank you all.

Finally, we offer hope that Trac will prove itself useful to like-minded
programmers around the world, and that this release will prove an
improvement
over the last version.

Please let us know. :-)

/The Trac Team <http://trac.edgewall.com/>