Trac 0.11.2 (November 8, 2008)
http://svn.edgewall.org/repos/trac/tags/trac-0.11.2
Trac 0.11.2 contains two security fixes and a couple of bug fixes.
The following list contains only a few highlights:
Bug fixes:
* Fixes potential DOS vulnerability with certain wiki markup. Reported by
Matt Murphy.
* Improved HTML sanitizer filter to detect possible phishing attempts.
Reported by Simon Willison.
* MySQL db backend improvement (reconnect after idle timeout #4465)
* TicketQuery speed improvements (#6436)
* Fixes for RSS feeds (timeline entries no longer truncated #7316, no longer
download some feeds under Firefox #3899)
* Search now works for custom fields (#2530)
* Same order for ticket fields for new and existing tickets (#7018)
* Enforce fine-grained permission for "quickjump" search results (#7655)
* E-mail obfuscation was not done in a few remaining places (#7688, #6532)
* Uninstall of plugins from WebAdmin was not working - feature disabled
for now
* More robust pagination of results for reports and custom queries (#7424,
#7544)
* Support for newer version of pygments (#7622)
* Documentation updated (#7603, #7205, #7318)
Minor improvements:
* Better support for Wiki page hierarchy (show path #2780, link to
parent #2150)
* Custom query allow to search in description and other text fields (#4824)
* Install workflow sample files, it is key feature of 0.11.
* Fix PLIST, add missing EGG_INFO and @dirrm entries.
Bump PKGREVISION and PR 39538 should be fixed .
Traq was already using sqlite3 - I misunderstood the py-sqlite numbering.
- py-sqlite3 is sqlite3 for python2.5
- py-sqlite2 is sqlite3 from python < 2.5
- py-sqlite is sqlite2 for some version or versions
Apologies to the non python 2.5 users for he original breakage
Trac 0.11.1 (August 6, 2008)
http://svn.edgewall.org/repos/trac/tags/trac-0.11.1
Trac 0.11.1 contains a number of bug fixes and minor enhancements.
The following list contains only a few highlights:
* Improved DB connection handling (new connection pool)
* Better MySQL backend unicode support. "utf8" and "utf8_bin" is the
recommended database charset and collation settings.
* Fixes intermittent "constraint violation" and "invalid form token"
error messages.
* Fixes roadmap layout glitch in Firefox 3.
* Safer default umask value for tracd (can be set using --umask option)
* Better default PYTHON_EGG_CACHE value.
The complete list of closed tickets can be found here:
http://trac.edgewall.org/query?status=closed&milestone=0.11.1
Trac 0.11 'Genshi' (June 22, 2008)
http://svn.edgewall.org/repos/trac/tags/trac-0.11
Trac 0.11 contains a great number of new features, improvements and
bug fixes. The following list contains only a few highlights:
* New template engine for generating content (Genshi)
* New configurable workflow in the ticket subsystem
* Finer-grained control of permissions
* Support for Pygments as the default syntax highlighter
* Improved repository browser ("blame" support, dynamic in-place
expansion of folders)
* Improved user preferences subsystem, among which the possibility for
* any user to select their time zone and disable access keys
* The WebAdmin plugin is now an integral part of Trac
* Paging of timeline and query results.
A more complete list of new features can be found in the RELEASE file.
The complete list of closed tickets can be found here:
http://trac.edgewall.org/query?status=closed&milestone=0.11
very minor update.
Trac 0.10.5 (Jun 23, 2008)
http://svn.edgewall.org/repos/trac/tags/trac-0.10.5
Trac 0.10.5 contains two security fixes and a couple of bug fixes.
The following list contains only a few highlights:
* Fixes a cross-site redirection vulnerability in the quickjump function
reported by Russ McRee.
* Fixes a wiki engine XSS vulnerability found by Nathan Collins.
* Added PostgreSQL 8.3 support.
* Fixes FineGrainedPermissions for scoped repositories.
* Fixes problem with repository syncing raising exceptions.
The complete list of closed tickets can be found here:
http://trac.edgewall.org/query?status=closed&milestone=0.10.5
- assume that Python 2.4 and 2.5 are compatible and allow checking for
fallout.
- remove PYTHON_VERSIONS_COMPATIBLE that are obsoleted by the 2.3+
default. Modify the others to deal with the removals.
connectors (PgSQL and psycopg2) are also supported.
Update sqlite to version 3, which is what upstream recommends (both
trac and sqlite think sqlite2 is crufty). This will require a
dump/restore for those using sqlite 2 with trac.
Trac 0.10.4 (Apr 20, 2007)
http://svn.edgewall.org/repos/trac/tags/trac-0.10.4
Trac 0.10.4 is a bug fix release. The following list contains only a
few highlights:
* Repository cache improvements. The new syncing scheme is incompatible with
the previous one and requires a database schema upgrade in order to prevent
the old and the new codebase to be mixed. A repository resync is not needed,
though. The 0.10.4 scheme is compatible with the 0.11 one.
(#3837, #4043 and #4586)
* Fix a possible freeze under heavy load (#4465)
The complete list of closed tickets can be found here:
http://trac.edgewall.org/query?status=closed&milestone=0.10.4
Trac 0.10.3.1 (March 8, 2007)
http://svn.edgewall.org/repos/trac/tags/trac-0.10.3.1
Trac 0.10.3.1 is a security release:
* Always send "Content-Disposition: attachment" headers where potentially
unsafe (user provided) content is available for download. This behaviour
can be altered using the "render_unsafe_content" option in the
"attachment" and "browser" sections of trac.ini.
* Fixed XSS vulnerability in "download wiki page as text" in combination with
Microsoft IE. Reported by Yoshinori Oota, Business Architects Inc.
Changes since 0.9.4:
- Advanced diff support
- InterWiki and InterTrac support
- Improved modularity (database and version control backends as third-party
plugins, with an experimental mysql backend)
- Improved notification system
- Support for spam protection
- WSGI used as web server protocol
- Lots of minor improvements in Wiki syntax, to the Wiki and to the
Ticket subsystem (with exports in CSV or RSS format)
Changes:
* Fixed reStructuredText breach of privacy and denial of service
vulnerability found by Felix Wiemann.
* trac-post-commit-hook fixes.
* Fixed bugs: #2894, #3058, #3209#3325.
http://svn.edgewall.com/repos/trac/tags/trac-0.8.4
Upstream changelog:
* Fixed file upload vulnerability. Trac could be tricked into
uploading files outside the environment directory. All users
are recommended to upgrade. Vulnerability found by the Hardened-PHP
project.
Thanks adrianp@NetBSD.org for the heads-up.
http://svn.edgewall.com/repos/trac/tags/trac-0.8.3
Upstream changelog 0.8.3:
* Fix compatibility of 'trac-admin resync' with Subversion >= 1.2.
* Settings page now works correctly when Trac is deployed at the root
of a host.
* Windows packaging issues resolved.
* Fixed bugs
Upstream changelog 0.8.2:
* Compatibility with Subversion >= 1.2 fixed.
* Compatibility with Docutils >= 0.3.7 fixed.
* Fixed bugs
Upstream changelog 0.8.1:
* Improved Python 2.1 compatibility.
* Layout of navigation bar in Opera fixed.
* Execution of Javascript through event handler attributes in HTML
code is now forbidden.
* Fixed bugs
http://svn.edgewall.com/repos/trac/tags/trac-0.8
Thanks to Simon Kuhn <sak8@eecs.cwru.edu> for the initial patch.
Upstream changelog:
* Roadmap module.
* Support for custom ticket properties.
* Wiki administration features.
* Advanced ticket queries.
* Improved diff display.
* User preferences.
* Wiki editing (near-wysiwyg) aids a la wikipedia.
* Improved email notification.
* Fixed bugs
Changes:
* Performance improvements.
* View diffs between wiki page edits.
* Improved Search module.
* Support for tables in the wiki. (Thanks to Stephen Hansen)
* Colored reports. Use colors to show priority, etc.
* Support for custom wiki processor macros. (See TracReports)
* reStructuredText markup support (See WikiRestructuredText)
* HTML markup support (See WikiHtml)
* Report groups. Group results by a column.
* Multi-line report rows.
* Download report in CSV (Comma Separated Value) and tab-separated format
* RSS 2.0 content syndication support in Timeline, Reports and Log.
* Better, locale-based date and time formatting.
* Wiki RecentChanges support.
* Overall usability, consistency and cosmetic improvements.
* More documentation.
See also <http://projects.edgewall.com/trac/report/8> for a detailed
list of issues resolved since 0.5.2.
Changes:
* Performance improvements.
* Better unicode support in commit-messages.
* TRAC_ADMIN is now a real "meta-permission" containing all other permissions.
* Wiki-links of the /path format can now also link to directories.
* Handle subversion changesets without any "author" specified.
* "view" checkboxes in the timeline view now reflect the current state.
* The subversion repository is now indexed by "trac-admin initdb"
instead of trac.cgi at first execution.
* Most of the inline css is removed.
* IE6 navbar problem fixed.
* Various bug fixes.
Trac is an enhanced wiki and issue tracking system for software
development projects.
Trac provides:
* An integrated system for managing software projects
* An enhanced wiki
* A flexible web-based issue tracker
* An interface to the Subversion revision control system
