It happens quite a lot that there are multiple environment when deploying tryton: production, staging, development, etc. In order to reduce the possibility of wrongly change the production...

lizparadox_ has discovered that the report name can be used to execute commands on the server. Impact CVSS v3.0 Base Score: 6.8 Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High Workaround There is no workaround. Resolution All affected users should upgrade trytond to the latest version. Affected versions per series: trytond: 8.0: <= 8.0.10 7.8: <= 7.8.16 Not aff...

Tryton is being translated into 38 languages using Weblate. Join the translation.

Success story of Mifarma implementing Tryton

September brings a balance of trytond internals and business-module refinements. The server now retries queued tasks that were dropped because a worker died, enforces request timeouts for the whole request, and exposes routes so RPC endpoints can be registered declaratively. On the user side, European VAT numbers are now validated in the background, stock periods close themselves, and the IBAN editor formats the number as it is typed-in. All of this builds on our last LTS release 8.0. Fo...

The foundation has registered Tryton as trademark in China. 传奇有限公司 (Chuanqi Co., Ltd.) has request to revoke our trademark for the class 9. In order to keep the trademark we need to provide proof within 2 months that the trademark has been used in China between May 27th 2023 and May 26th 2026 for the class 9 (computer and computer peripherals). The Foundation has no commercial activity so we ask to the community if anyone can provide such proof (sale contract, invoice, report etc.)? We have ...

Success story of a company specialized in animal nutrition

This month the community focused on the trytond core. The XML data import grows a new way to find existing records, the database schema shrinks oversized character columns automatically, and the test suite for function fields and button methods gets more coverage. On the user-facing side, the accounting menus are tidied up, and the DPD shipping carrier moves to the latest API. All of this builds on our last LTS release 8.0. For an in depth overview of the Tryton issues please take a look...

Success story of Expertise Vision implementing Tryton

Cédric Krier has discovered that access is not enforced when browsing record instances in template. Impact CVSS v3.0 Base Score: 6.5 Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None Workaround There is no workaround. Resolution All affected users should upgrade trytond, marketing_automation and marketing_email to the latest version. Affected versions per series: trytond:...

The user titou has discovered that the administrator group can execute Python code on the server which is hidden inside an uploaded report template. And Dan Shallom has discovered that the same can also be accomplished by the marketing group when uploading marketing email templates. Impact CVSS v3.0 Base Score: 6.5 Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None Workaroun...

Once again this month the community put most of its energy into fixing bugs, refining existing behaviour, and improving performance on top of our last LTS release 8.0. In addition, we are happy to present a selection of new features and documentation updates in this newsletter. For an in depth overview of the Tryton issues please take a look at our issue tracker or see the issues and merge requests filtered by label. Changes for the User Sales, Purchases and Projects We now move the wa...

Success story of a company that installs and maintains lifts with Tryton

In the last month we focused on fixing bugs, improving the behaviour of things, speeding-up performance issues - building on the changes from our last release. We also added some new features which we would like to introduce to you in this newsletter. For an in depth overview of the Tryton issues please take a look at our issue tracker or see the issues and merge requests filtered by label. Changes for the User Accounting, Invoicing and Payments We now add an optional journal column on...

Success story of Grufesa implementing Tryton

We are proud to announce the 8.0 LTS release of Tryton. This release provides many bug fixes, performance improvements and some fine tuning. You can give it a try on the demo server, use the docker image or download it here. As usual upgrading from previous series is fully supported. Here is a list of the most noticeable changes: Changes for the User Client There is now a visual hint on the widgets of modified fields. This way the user can see what was modified before saving. Web The ...

This site runs Weblate for localizing various software projects.

We are proud to announce the release of Relatorio version 0.12.0. Relatorio is a templating library mainly for OpenDocument using also OpenDocument as source format. In addition to bug-fixes, this release contains the following improvements: Upgrade to pyproject Add support for Python 3.13 and 3.14 Remove support for Python older than 3.9 The package is available at relatorio · PyPI The documentation is available at https://docs.tryton.org/relatorio/0.12.0/