TurboGears 2.0 b4 released

[Mark Ramm]

We're doing a beta 4 release a bit ahead of schedule because there are
a couple of important bugs that were found in b3, and which have
already been fixed. The most important of which was a thread-safety
issue in repoze.what which could result in the wrong user getting an
authentication denial message if two users were denied at the same
time. This has the potential to leak information to untrusted users,
so it's a potential security risk, though the impact is fairly
limited.

Special thanks goes out this week to Alberto Valverde, who found and
submitted patches for the threadsafety issue in repoze.what, and who
helped with fixes to repoze.who and the turbogears middleware stack to
solve a couple of other issues.

Catwalk, tgext.admin, and the TurboGears mimetype system also have
fixes to correct various smaller issues, thanks to Chris Perkins.

Other than that, there are some updates to the docs, and there's a new
docs frontpage. We're still working on the TG2 documentation and most
of the doc updates will be coming in b5 and the first couple of
release candidates.

To download 2.0 beta 4, simply follow the instructions here:

http://turbogears.org/2.0/docs/main/DownloadInstall.html

If you're interested in the details of what's changed in this release,
take a look at the changelog:

http://trac.turbogears.org/wiki/2.0/changelog

--
Mark Ramm-Christensen
email: mark at compoundthinking dot com
blog: www.compoundthinking.com/blog