# Newsletter November 2025
**URL:** https://discuss.tryton.org/t/newsletter-november-2025/8920
**Category:** News
**Created:** [November 1, 2025, 7:00am UTC](https://discuss.tryton.org/t/newsletter-november-2025/8920 "2025-11-01T07:00:38Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@udono](https://discuss.tryton.org/u/udono)
#### Post date: [November 1, 2025, 7:00am UTC](https://discuss.tryton.org/t/newsletter-november-2025/8920/1 "2025-11-01T07:00:38Z")
Usually we would release the new Tryton version 7.8 in November, but this time we [postpone the release](https://discuss.tryton.org/t/postpone-the-release-of-series-7-8-by-one-month/8899). In the last month we focused on fixing bugs, improving the behaviour of things, speeding-up performance issues - building on the changes from [our last release](https://discuss.tryton.org/t/tryton-release-7-2/). We also added some new features which we would like to introduce to you in this newsletter.
For an in depth overview of the [Tryton issues please take a look at our issue tracker](https://bugs.tryton.org/) or see the issues and merge requests [filtered by label](https://code.tryton.org/tryton/-/labels).
## Changes for the User
### Sales, Purchases and Projects
[We now add the attributes name to the list of products used in sale and purchase lines](https://bugs.tryton.org/14280). Also now it is possible to filter by attributes when searching a product.
### Accounting, Invoicing and Payments
Now we [use the _description used_ when exporting FEC-file](https://bugs.tryton.org/14255) in French accounting. The move description _EcritureLib_ is not exported to the FEC-file when the move line originates from an invoice.
### System Data and Configuration
We now [prevent to change the _party_ of a company](https://bugs.tryton.org/14268) once the company is created. A party now also can only be assigned to one and only one company.
## New Documentation
Now we [clarify the documentation about _digits_](https://code.tryton.org/tryton/-/commit/71b1a6cef809e23812258d0eb65618a9a8c3c13e).
We now [document the _schedule task_ to assign shipments and productions](https://code.tryton.org/tryton/-/commit/2ec9d05201de8683f9d9b193c663304e7b5e7ed9).
## New Releases
We released bug fixes for the currently maintained [long term support series](https://discuss.tryton.org/t/release-process/395)
[7.0](https://code.tryton.org/tryton/-/commits/branch/7.0) and [6.0](https://code.tryton.org/tryton/-/commits/branch/6.0), and for the penultimate series [7.4](https://code.tryton.org/tryton/-/commits/branch/7.4).
## Security
Please update your systems to take care of a security related bug we found last month:
> [@Security Release for issue #14290](https://discuss.tryton.org/t/security-release-for-issue-14290/8895):
>
> [Brandon Da Costa](https://foss.heptapod.net/f10ww) and [Mahdi Afshar](https://foss.heptapod.net/Mahdi36) have found that [sao](https://www.npmjs.com/package/tryton-sao) [executes JavaScript included in HTML documents](https://bugs.tryton.org/14290) (such as attachments). These documents may be uploaded by any authenticated user. The JavaScript is executed in the same context as sao which gives access to sensitive data such as the session. Impact [CVSS v3.0 Base Score: 7.3](https://www.first.org/cvss/calculator/3-0#CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:H/RL:O/RC:C/CR:H/IR:H/MAV:N/MAC:L/MPR:L/MUI:R/MS:U/MC:H/MI:H/MA:N) Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: No…
## Changes for Implementers and Developers
Now we [add support for null ordering on SQLite](https://code.tryton.org/tryton/-/commit/d90c7bdbcf7ff4e57a3e9da37517b592754a2578). The support was added in SQLite version 3.30.0.
Authors: @dave @pokoli @udono
---
### Author:  [@system](https://discuss.tryton.org/u/system)
#### Post date: [December 1, 2025, 7:00am UTC](https://discuss.tryton.org/t/newsletter-november-2025/8920/2 "2025-12-01T07:00:55Z")
This topic was automatically closed after 30 days. New replies are no longer allowed.