[42493] Martin Schulze [SECURITY] [DSA 951-1] New trac packages fix SQL injection and cross-site scripting