The bugfix/security update to www-apps/trac-0.10.3 seems to work with a simple rename of www-apps/trac-0.10.2. Dependencies don't seem to have changed.
In CVS. Please, stop doing 0-day bump requests. We know when there are new releases, as we are subscribed to mailing lists.