On Sat, Jan 24, 2009 at 10:28 AM, Mark Ramm <[email protected]> wrote: > > We're doing a beta 4 release a bit ahead of schedule because there are > a couple of important bugs that were found in b3, and which have > already been fixed. The most important of which was a thread-safety > issue in repoze.what which could result in the wrong user getting an > authentication denial message if two users were denied at the same > time. This has the potential to leak information to untrusted users, > so it's a potential security risk, though the impact is fairly > limited. > > Special thanks goes out this week to Alberto Valverde, who found and > submitted patches for the threadsafety issue in repoze.what, and who > helped with fixes to repoze.who and the turbogears middleware stack to > solve a couple of other issues. > > Catwalk, tgext.admin, and the TurboGears mimetype system also have > fixes to correct various smaller issues, thanks to Chris Perkins. > > Other than that, there are some updates to the docs, and there's a new > docs frontpage. We're still working on the TG2 documentation and most > of the doc updates will be coming in b5 and the first couple of > release candidates. > > To download 2.0 beta 4, simply follow the instructions here: > > http://turbogears.org/2.0/docs/main/DownloadInstall.html > > If you're interested in the details of what's changed in this release, > take a look at the changelog: > > http://trac.turbogears.org/wiki/2.0/changelog
Awesome thanks, now I can drop several trunk/tip dependencies. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears Trunk" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/turbogears-trunk?hl=en -~----------~----~----~----~------~----~------~--~---
