We're doing a beta 4 release a bit ahead of schedule because there are a couple of important bugs that were found in b3, and which have already been fixed. The most important of which was a thread-safety issue in repoze.what which could result in the wrong user getting an authentication denial message if two users were denied at the same time. This has the potential to leak information to untrusted users, so it's a potential security risk, though the impact is fairly limited.
Special thanks goes out this week to Alberto Valverde, who found and submitted patches for the threadsafety issue in repoze.what, and who helped with fixes to repoze.who and the turbogears middleware stack to solve a couple of other issues. Catwalk, tgext.admin, and the TurboGears mimetype system also have fixes to correct various smaller issues, thanks to Chris Perkins. Other than that, there are some updates to the docs, and there's a new docs frontpage. We're still working on the TG2 documentation and most of the doc updates will be coming in b5 and the first couple of release candidates. To download 2.0 beta 4, simply follow the instructions here: http://turbogears.org/2.0/docs/main/DownloadInstall.html If you're interested in the details of what's changed in this release, take a look at the changelog: http://trac.turbogears.org/wiki/2.0/changelog -- Mark Ramm-Christensen email: mark at compoundthinking dot com blog: www.compoundthinking.com/blog --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears Trunk" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/turbogears-trunk?hl=en -~----------~----~----~----~------~----~------~--~---
