![[tokkee]](http://tokkee.org/images/avatar.png){kind=avatar}
diff --git a/doc/announcement.txt b/doc/announcement.txt
index 08fc839afa9b29c8e4be371d7049bb68bfb1c322..3d154e328e5cb7c6c34d8a73d4049f27ab5870ee 100644 (file)
--- a/doc/announcement.txt
+++ b/doc/announcement.txt
-I'm proud to release version 1.4.11 of Roundup which fixes a number bugs
-and closes a potential security hole.
-
-ALL tracker maintainers MUST read the upgrading documentation to make sure
-the hole is fixed in their tracker.
-
-Other changes in this release:
-
-- Generic class editor may now restore retired items (thanks Ralf Hemmecke)
-- Fix security hole allowing user permission escalation (thanks Ralf
- Schlatterbeck)
-- More SSL fixes. SSL wants the underlying socket non-blocking. So we
- don't call socket.setdefaulttimeout in case of SSL. This apparently
- never raises a WantReadError from SSL.
- This also fixes a case where a WantReadError is raised and apparently
- the bytes already read are dropped (seems the WantReadError is really
- an error, not just an indication to retry).
-- Correct initial- and end-handshakes for SSL
-- Update FAQ to mention infinite redirects with pathological settings of
- the tracker->web variable. Closes issue2537286, thanks to "stuidge"
- for reporting.
-- Fix some format errors in italian translation file
-- Some bugs issue classifiers were causing database lookup errors
-- Fix security-problem: If user hasn't permission on a message (notably
- files and content properties) and is on the nosy list, the content was
- sent via email. We now check that user has permission on the message
- content and files properties. Thanks to Intevation for funding this
- fix.
-- Fix traceback on .../msgN/ url, this requests the file content and for
- apache mod_wsgi produced a traceback because the mime type is None for
- messages, fixes issue2550586, thanks to Thomas Arendsen Hein for
- reporting and to Intevation for funding the fix.
-- Handle OPTIONS http request method in wsgi handler, fixes issue2550587.
- Thanks to Thomas Arendsen Hein for reporting and to Intevation for
- funding the fix.
-- Add documentation for migrating to the Register permission and
- fix mailgw to use Register permission, fixes issue2550599
-- Fix styling of calendar to make it more usable, fixes issue2550608
-- Fix typo in email section of user guide, fixes issue2550607
-- Fix WSGI response code (thanks Peter Pöml)
-- Fix linking of an existing item to a newly created item, e.g.
- edit action in web template is name="issue-1@link@msg" value="msg1"
- would trigger a traceback about an unbound variable.
- Add new regression test for this case. May be related to (now closed)
- issue1177477. Thanks to Intevation for funding the fix.
-- Clean up all the places where role processing occurs. This is now in a
- central place in hyperdb.Class and is used consistently throughout.
- This also means now a template can override the way role processing
- occurs (e.g. for elaborate permission schemes). Thanks to intevation
- for funding the change.
-- Fix issue2550606 (german translation bug) "an hour" is only used in
- the context "in an hour" or "an hour ago" which translates to german
- "in einer Stunde" or "vor einer Stunde". So "an hour" is translated
- "einer Stunde" (which sounds wrong at first). Also note that date.py
- already has a comment saying "XXX this is internationally broken" --
- but at least there's a workaround for german :-) Thanks to Chris
- (radioking) for reporting.
+I'm proud to release version 1.4.19 of Roundup which introduces some
+minor features and, as usual, fixes some bugs:
+
+Features:
+
+- Xapian indexing improved: Slightly faster and slightly smaller database.
+ Closes issue2550687. Thanks to Olly Betts for the patch. (Bernhard Reiter)
+- PostgreSQL backend minor improvement: database creation less likely to fail
+ for PostgreSQL versions >= 8.1 as the table "postgres" is used by default.
+ Closes issue2550543. Thanks to Kai Storbeck for the patch. (Bernhard Reiter)
+- Allow HTMLRequest.batch to filter on other permissions than "View"
+ (e.g. on the new "Search" permission") by adding a "permission"
+ parameter. Thanks to Eli Collins for the patch. Closes issue2550699. (Ralf)
+
+Fixed:
+
+- Installation: Fixed an issue that prevented to use EasyInstall
+ and a Python egg. Thanks to Satchidanand Haridas for the patch and
+ John Kristensen for testing it. (Bernhard Reiter)
+- The PostgreSQL backend quotes database names now for CREATE and DROP,
+ enabling more exotic tracker names. Closes issue2550497.
+ Thanks to Sebastian Harl for providing the patch. (Bernhard Reiter)
+- Updated the url to point to www.roundup-tracker.org in two places in the
+ docs. (Bernhard Reiter)
+- Do not depend on a CPython implementation detail anymore to make Roundup
+ more compatible with other Python implementations like PyPy.
+ Closes issue2550707. Thanks to Christof Meerwald. (Bernhard Reiter, Richard)
+- Yet another fix to the mail gateway, messages got *all* files of
+ an issue, not just the new ones. Thanks to Rafal Bisingier for
+ reporting and proposing a fix. The regression test was updated.
+ (Ralf)
+- Fix version numbers in upgrade documentation, the file-unlink defect
+ was in 1.4.17 not 1.4.16. Thanks to Rafal Bisingier. (Ralf)
+- Fix encoded email header parsing if multiple encoded and non-encoded
+ parts are present. RFC2047 specifies that spacing is removed only
+ between encoded parts, we always removed the space. Note that this bug
+ was present before mail gateway refactoring :-) Thanks for thorough
+ testing of mail gateway code by Rafal Bisingier. (Ralf)
+- The "Retire" permission was not being registered. (Richard)
+- Fix StringIO issue2550713: io.StringIO in newer versions of python
+ returns unicode strings and expects a unicode string in the
+ constructor. Unfortunately csv doesn't handle unicode (yet). So we
+ need to use a BytesIO which gets the utf-8 string from the
+ web-interface. Compatibility for old versions by using
+ StringIO.StringIO for emulating a io.BytesIO also works.
+ Thanks to Cedric Krier for reporting. Closes issue2550713.
+ Added a regression test for EditCSVAction (Ralf)
+- Fix issue2550691 where a Unix From-Header was sometimes inserted in
+ outgoing emails, thanks to Joseph Myers for the patch. (Ralf)
If you're upgrading from an older version of Roundup you *must* follow
the "Software Upgrade" guidelines given in the maintenance documentation.
-Roundup requires python 2.3 or later (but not 3+) for correct operation.
+Roundup requires python 2.4 or later (but not 3+) for correct operation.
To give Roundup a try, just download (see below), unpack and run::
Release info and download page:
http://cheeseshop.python.org/pypi/roundup
Source and documentation is available at the website:
- http://roundup.sourceforge.net/
+ http://roundup-tracker.org/
Mailing lists - the place to ask questions:
http://sourceforge.net/mail/?group_id=31577
The system will facilitate communication among the participants by managing
discussions and notifying interested parties when issues are edited. One of
the major design goals for Roundup that it be simple to get going. Roundup
-is therefore usable "out of the box" with any python 2.3+ (but not 3+)
+is therefore usable "out of the box" with any python 2.4+ (but not 3+)
installation. It doesn't even need to be "installed" to be operational,
though an install script is provided.