Log Message:
Update to 0.11.6, addressing
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4405

From release notes at:
  http://trac.edgewall.org/browser/tags/trac-0.11.6/RELEASE

November 28, 2009

Trac 0.11.6 contains two security fixes and a number of bug fixes,
performance improvements and minor enhancements.

Changes in 0.11.6

        * Fixed the policy checks in report results when using
          alternate formats.
        * Added a check for the "raw" role that is missing in docutils
          < 0.6.
        * Re-enabled connection pooling with SQLite (#3446).
        * Added caching of configuration options (#8510).
        * Fixed the "database is locked" issue with SQLite (#3446,
          #8468).
        * Deprecated SQLite 2.x support (#8625).
        * Fixed hanlding of times in timezones with DST (#8240).
        * Avoid corruption of trac.ini during write (#8623).
        * Improved support for revision ranges in the revision log
          view (#8349)

updating during freeze approved by wiz@