Mailing List Archive

SECURITY: Trac 0.9.6 Released
Trac 0.9.6 Release Notes
July 6, 2006

We're proud to present our latest release - Trac 0.9.6.

Trac is an enhanced wiki and issue tracking system, integrated with
Subversion, for software development projects. Trac uses a minimalistic
approach to web-based software project management. Our mission is
simple; to help developers write great software while staying out of the
way. Trac should impose as little as possible on a team's established
development process and policies.

Trac allows wiki markup in issue descriptions and commit messages,
creating links and useful structure between bugs, tasks, changesets,
files and wiki pages. A timeline view presents all project events in
chronological order, making tracking progress or getting an overview of
a project easy.

For more information, please visit the main Trac web site:


The software, published under the modified BSD License, is
available at:


Please report problems and provide feedback in the project issue


For questions, comments and user discussions, please use the Trac
mailing list. List information, subscription and archive available at:


What's New
A brief summary of major changes for version 0.9.6:

* Fixed reStructuredText breach of privacy and denial of service
vulnerability found by Felix Wiemann.
* trac-post-commit-hook fixes.

For a more complete list of improvements, see the ChangeLog at:


About the vulnerability
The discovered vulnerability requires docutils to be installed and
enabled. Systems that do not have docutils installed or enabled are not
vulnerable. As of this version version 0.3.9 or greater of docutils is
required for using reStructuredText markup in Trac.

Many thanks to the growing number of people who have, and continue to,
support the project. Also our thanks to all people providing feedback
and bug reports that helps us make Trac better, easier to use and more

Without your invaluable help, Trac would not evolve. Thank you all.

Finally, we offer hope that Trac will prove itself useful to like-minded
programmers around the world, and that this release will prove an
improvement over the last version.

Please let us know. :-)

/The Trac Team <>
Trac-Announce mailing list
Learn more about Trac at: