# News

**URL:** https://discuss.tryton.org/c/news/25.md

[Latest](https://discuss.tryton.org/latest.md) · [Categories](https://discuss.tryton.org/categories.md) · [Tags](https://discuss.tryton.org/tags.md)

---

## [Tryton Release 8.2](https://discuss.tryton.org/t/tryton-release-8-2/9421)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [October 6, 2026, 4:00pm UTC](https://discuss.tryton.org/t/tryton-release-8-2/9421 "2026-10-06T16:00:22Z")

</div>

We are proud to announce the 8.2 release of Tryton. This release provides many bug fixes, performance improvements and some fine tuning. You can give it a try on the demo server, use the docker image or download i…

---

## [Security Release for issue 15032](https://discuss.tryton.org/t/security-release-for-issue-15032/9411)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [October 5, 2026, 6:00am UTC](https://discuss.tryton.org/t/security-release-for-issue-15032/9411 "2026-10-05T06:00:21Z")

</div>

Jaisurya has discovered that the content of the HTML editor was not escaped. Impact CVSS v3.0 Base Score: 5.4 Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Ch…

---

## [Security Release for issue 15035](https://discuss.tryton.org/t/security-release-for-issue-15035/9412)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [October 5, 2026, 6:00am UTC](https://discuss.tryton.org/t/security-release-for-issue-15035/9412 "2026-10-05T06:00:21Z")

</div>

lizparadox\_ has discovered that the report name can be used to execute commands on the server. Impact CVSS v3.0 Base Score: 6.8 Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction:…

---

## [Tryton News September 2026](https://discuss.tryton.org/t/tryton-news-september-2026/9356)

<div class="topic-metadata">

**Author:** [@udono](https://discuss.tryton.org/u/udono)\
**Replies:** 0\
**Last updated:** [September 2, 2026, 6:00am UTC](https://discuss.tryton.org/t/tryton-news-september-2026/9356 "2026-09-02T06:00:54Z")

</div>

September brings a balance of trytond internals and business-module refinements. The server now retries queued tasks that were dropped because a worker died, enforces request timeouts for the whole request, and ex…

---

## [Security Release for issue #14947](https://discuss.tryton.org/t/security-release-for-issue-14947/9302)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [August 5, 2026, 6:00am UTC](https://discuss.tryton.org/t/security-release-for-issue-14947/9302 "2026-08-05T06:00:46Z")

</div>

Cédric Krier has discovered that Tryton does not prevent weasyprint to access local files when rendering HTML report to PDF. Impact CVSS v3.0 Base Score: 4.9 Attack Vector: Network Attack Complexity: Low Privileges Re…

---

## [Tryton News August 2026](https://discuss.tryton.org/t/tryton-news-august-2026/9301)

<div class="topic-metadata">

**Author:** [@udono](https://discuss.tryton.org/u/udono)\
**Replies:** 0\
**Last updated:** [August 3, 2026, 9:33am UTC](https://discuss.tryton.org/t/tryton-news-august-2026/9301 "2026-08-03T09:33:35Z")

</div>

This month the community focused on the trytond core. The XML data import grows a new way to find existing records, the database schema shrinks oversized character columns automatically, and the test suite for fun…

---

## [Release 1.0.0 of Relatorio](https://discuss.tryton.org/t/release-1-0-0-of-relatorio/9293)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [July 16, 2026, 4:42pm UTC](https://discuss.tryton.org/t/release-1-0-0-of-relatorio/9293 "2026-07-16T16:42:25Z")

</div>

We are proud to announce the release of Relatorio version 1.0.0. Relatorio is a templating library for OpenDocument using also OpenDocument as source format. In addition to bug-fixes, this release contains the followi…

---

## [Release 1.0.0 of GooCalendar](https://discuss.tryton.org/t/release-1-0-0-of-goocalendar/9292)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [July 16, 2026, 4:25pm UTC](https://discuss.tryton.org/t/release-1-0-0-of-goocalendar/9292 "2026-07-16T16:25:29Z")

</div>

We are proud to announce the release 1.0.0 of GooCalendar. GooCalendar is a Python library that implements a calendar widget for GTK+. In addition to bug-fixes, this release contains this following improvements: Remo…

---

## [Security Release for issue #5160 and #14869](https://discuss.tryton.org/t/security-release-for-issue-5160-and-14869/9266)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 2\
**Last updated:** [July 3, 2026, 11:13am UTC](https://discuss.tryton.org/t/security-release-for-issue-5160-and-14869/9266 "2026-07-03T11:13:53Z")

</div>

The user titou has discovered that the administrator group can execute Python code on the server which is hidden inside an uploaded report template. And Dan Shallom has discovered that the same can also be accomplished…

---

## [Security Release for issue 14907](https://discuss.tryton.org/t/security-release-for-issue-14907/9267)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [July 3, 2026, 6:00am UTC](https://discuss.tryton.org/t/security-release-for-issue-14907/9267 "2026-07-03T06:00:50Z")

</div>

Cédric Krier has discovered that access is not enforced when browsing record instances in template. Impact CVSS v3.0 Base Score: 6.5 Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interact…

---

## [Tryton News July 2026](https://discuss.tryton.org/t/tryton-news-july-2026/9273)

<div class="topic-metadata">

**Author:** [@udono](https://discuss.tryton.org/u/udono)\
**Replies:** 0\
**Last updated:** [July 1, 2026, 8:30am UTC](https://discuss.tryton.org/t/tryton-news-july-2026/9273 "2026-07-01T08:30:54Z")

</div>

Once again this month the community put most of its energy into fixing bugs, refining existing behaviour, and improving performance on top of our last LTS release 8.0. In addition, we are happy to present a select…

---

## [Tryton News June 2026](https://discuss.tryton.org/t/tryton-news-june-2026/9246)

<div class="topic-metadata">

**Author:** [@udono](https://discuss.tryton.org/u/udono)\
**Replies:** 0\
**Last updated:** [June 2, 2026, 6:00am UTC](https://discuss.tryton.org/t/tryton-news-june-2026/9246 "2026-06-02T06:00:15Z")

</div>

In the last month we focused on fixing bugs, improving the behaviour of things, speeding-up performance issues - building on the changes from our last release. We also added some new features which we would like t…

---

## [Tryton News May 2026](https://discuss.tryton.org/t/tryton-news-may-2026/9214)

<div class="topic-metadata">

**Author:** [@udono](https://discuss.tryton.org/u/udono)\
**Replies:** 0\
**Last updated:** [May 1, 2026, 6:00am UTC](https://discuss.tryton.org/t/tryton-news-may-2026/9214 "2026-05-01T06:00:35Z")

</div>

During the last month we focused on fixing bugs, improving the behaviour of things, speeding-up performance issues - building on the changes from our last LTS release 8.0. We added some new features which we would…

---

## [Tryton Release 8.0](https://discuss.tryton.org/t/tryton-release-8-0/9208)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 2\
**Last updated:** [May 21, 2026, 4:02pm UTC](https://discuss.tryton.org/t/tryton-release-8-0/9208 "2026-05-21T16:02:35Z")

</div>

We are proud to announce the 8.0 LTS release of Tryton. This release provides many bug fixes, performance improvements and some fine tuning. You can give it a try on the demo server, use the docker image or downlo…

---

## [Tryton News April 2026](https://discuss.tryton.org/t/tryton-news-april-2026/9179)

<div class="topic-metadata">

**Author:** [@udono](https://discuss.tryton.org/u/udono)\
**Replies:** 1\
**Last updated:** [April 1, 2026, 9:45pm UTC](https://discuss.tryton.org/t/tryton-news-april-2026/9179 "2026-04-01T21:45:34Z")

</div>

During the last month we focused on fixing bugs, improving the behaviour of things, speeding-up performance issues - building on the changes from our last release. We also added some new features which we would li…

---

## [Release 0.8.0 of mt940](https://discuss.tryton.org/t/release-0-8-0-of-mt940/9162)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [March 23, 2026, 9:33am UTC](https://discuss.tryton.org/t/release-0-8-0-of-mt940/9162 "2026-03-23T09:33:29Z")

</div>

We are proud to announce the release of the version 0.8.0 of mt940. mt940 is a library to parse MT940 files. MT940 is a specific SWIFT message type used by the SWIFT network to send and receive end-of-day bank account s…

---

## [Release 0.4.0 of febelfin-coda](https://discuss.tryton.org/t/release-0-4-0-of-febelfin-coda/9161)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [March 23, 2026, 9:29am UTC](https://discuss.tryton.org/t/release-0-4-0-of-febelfin-coda/9161 "2026-03-23T09:29:21Z")

</div>

We are proud to announce the release of the version 0.4.0 of febelfin-coda. febelfin-coda is a library to parse CODA files. This bank standard (also called CODA) specifies the lay-out for the electronic files, by banks …

---

## [Release 0.2.0 of aeb43](https://discuss.tryton.org/t/release-0-2-0-of-aeb43/9160)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [March 23, 2026, 9:24am UTC](https://discuss.tryton.org/t/release-0-2-0-of-aeb43/9160 "2026-03-23T09:24:45Z")

</div>

We are proud to announce the release of the version 0.2.0 of aeb43. aeb43 is a library to parse AEB43 files. AEB43 is a standard, fixed-length 80-character file format used by Spanish banks for transmitting bank stateme…

---

## [Release 0.12.0 of Relatorio](https://discuss.tryton.org/t/release-0-12-0-of-relatorio/9159)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [March 23, 2026, 9:16am UTC](https://discuss.tryton.org/t/release-0-12-0-of-relatorio/9159 "2026-03-23T09:16:42Z")

</div>

We are proud to announce the release of Relatorio version 0.12.0. Relatorio is a templating library mainly for OpenDocument using also OpenDocument as source format. In addition to bug-fixes, this release contains the…

---

## [Release 1.7.0 of python-sql](https://discuss.tryton.org/t/release-1-7-0-of-python-sql/9157)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [March 22, 2026, 9:18am UTC](https://discuss.tryton.org/t/release-1-7-0-of-python-sql/9157 "2026-03-22T09:18:06Z")

</div>

We are proud to announce the release of the version 1.7.0 of python-sql. python-sql is a library to write SQL queries in a pythonic way. It is mainly developed for Tryton but it has no external dependencies and is agnos…

---

## [Release 0.1.0 of hatch-tryton](https://discuss.tryton.org/t/release-0-1-0-of-hatch-tryton/9154)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [March 19, 2026, 10:18am UTC](https://discuss.tryton.org/t/release-0-1-0-of-hatch-tryton/9154 "2026-03-19T10:18:21Z")

</div>

We are proud to announce the first release of the version 0.1.0 of hatch-tryton. hatch-tryton is a hatchling plugin that manages Tryton dependencies. We will rely on this tool to upgrade Tryton’s packages to pyproject.…

---

## [Tryton News March 2026](https://discuss.tryton.org/t/tryton-news-march-2026/9121)

<div class="topic-metadata">

**Author:** [@udono](https://discuss.tryton.org/u/udono)\
**Replies:** 0\
**Last updated:** [March 1, 2026, 7:00am UTC](https://discuss.tryton.org/t/tryton-news-march-2026/9121 "2026-03-01T07:00:31Z")

</div>

In the last month we focused on fixing bugs, improving the behaviour of things, speeding-up performance issues - building on the changes from our last release. We also added some new features which we would like t…

---

## [End of Windows 32-bit Builds](https://discuss.tryton.org/t/end-of-windows-32-bit-builds/9099)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 0\
**Last updated:** [February 16, 2026, 7:00am UTC](https://discuss.tryton.org/t/end-of-windows-32-bit-builds/9099 "2026-02-16T07:00:45Z")

</div>

The MSYS2 project has discontinued building cx-Freeze for the mingw32 platform. We depend on these packages to build our Windows client, and we currently do not have the resources to maintain the required packages for Wi…

---

## [Tryton News February 2026](https://discuss.tryton.org/t/tryton-news-february-2026/9076)

<div class="topic-metadata">

**Author:** [@udono](https://discuss.tryton.org/u/udono)\
**Replies:** 0\
**Last updated:** [February 1, 2026, 7:00am UTC](https://discuss.tryton.org/t/tryton-news-february-2026/9076 "2026-02-01T07:00:22Z")

</div>

During the last month we focused on fixing bugs, improving the behaviour of things, speeding-up performance issues - building on the changes from our release last month. But we also added many new features which w…

---

## [Tryton Release 7.8](https://discuss.tryton.org/t/tryton-release-7-8/9015)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 2\
**Last updated:** [December 18, 2025, 11:58am UTC](https://discuss.tryton.org/t/tryton-release-7-8/9015 "2025-12-18T11:58:31Z")

</div>

We are proud to announce the 7.8 release of Tryton. This release provides many bug fixes, performance improvements and some fine tuning. You can give it a try on the demo server, use the docker image or download i…

---

## [Security Release for issue #14366](https://discuss.tryton.org/t/security-release-for-issue-14366/8953)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 1\
**Last updated:** [December 1, 2025, 9:21pm UTC](https://discuss.tryton.org/t/security-release-for-issue-14366/8953 "2025-12-01T21:21:57Z")

</div>

Cédric Krier has found that trytond does not enforce access rights for data export (since version 6.0). Impact CVSS v3.0 Base Score: 6.5 Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Inte…

---

## [Security Release for issue #14363](https://discuss.tryton.org/t/security-release-for-issue-14363/8951)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 1\
**Last updated:** [December 1, 2025, 9:24pm UTC](https://discuss.tryton.org/t/security-release-for-issue-14363/8951 "2025-12-01T21:24:42Z")

</div>

Abdulfatah Abdillahi has found that sao does not escape the completion values. The content of completion is generally the record name which may be edited in many ways depending on the model. The content may include some …

---

## [Security Release for issue #14364](https://discuss.tryton.org/t/security-release-for-issue-14364/8952)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 1\
**Last updated:** [December 1, 2025, 9:19pm UTC](https://discuss.tryton.org/t/security-release-for-issue-14364/8952 "2025-12-01T21:19:49Z")

</div>

Mahdi Afshar has found that trytond does not enforce access rights for the route of the HTML editor (since version 6.0). Impact CVSS v3.0 Base Score: 7.1 Attack Vector: Network Attack Complexity: Low Privileges Requir…

---

## [Security Release for issue #14354](https://discuss.tryton.org/t/security-release-for-issue-14354/8950)

<div class="topic-metadata">

**Author:** [@ced](https://discuss.tryton.org/u/ced)\
**Replies:** 2\
**Last updated:** [December 1, 2025, 9:16pm UTC](https://discuss.tryton.org/t/security-release-for-issue-14354/8950 "2025-12-01T21:16:22Z")

</div>

Mahdi Afshar and Abdulfatah Abdillahi have found that trytond sends the trace-back to the clients for unexpected errors. This trace-back may leak information about the server setup. Impact CVSS v3.0 Base Score: 4.3 At…

---

## [Newsletter November 2025](https://discuss.tryton.org/t/newsletter-november-2025/8920)

<div class="topic-metadata">

**Author:** [@udono](https://discuss.tryton.org/u/udono)\
**Replies:** 0\
**Last updated:** [November 1, 2025, 7:00am UTC](https://discuss.tryton.org/t/newsletter-november-2025/8920 "2025-11-01T07:00:38Z")

</div>

Usually we would release the new Tryton version 7.8 in November, but this time we postpone the release. In the last month we focused on fixing bugs, improving the behaviour of things, speeding-up performance issue…

[Next page](https://discuss.tryton.org/c/news/25.md?page=1)
