MantisBT 2.16.0 and 2.15.1 Released

In order to stay up to date with the latest MantisBT news and participate in our polls, please follow us on twitter and retweet to spread the word!

MantisBT 2.16.0

A feature release including functional improvements and bug fixes.

  • 23978: [ui] Fonts are not rendered correctly in Windows clients (atrol)
  • 23992: [ui] Font = Times News Roman after Upgrade from v2.7.0 (atrol)
  • 24416: [upgrade] need help to migrate the Mantis 1.0.8 that my current company has to the latest version of 2.14.0. (dregad)
  • 24501: [installation] MantisBT on Windows – Check for php_fileinfo.dll enabled on php.ini (atrol)
  • 24523: [performance] Unneeded information in Change Log and Roadmap (atrol)
  • 24552: [code cleanup] Code Cleanup (atrol)
  • 24553: [performance] Performance enhancement of config_get_global function (atrol)
  • 24564: [timeline] Missing display of events in Timeline if All Projects is selected (atrol)
  • 24578: [documentation] Documentation: PHP documentation link: “installation.php” -> “install.php” (dregad)
  • 24579: [documentation] Documentation: Admin Guide: Installation: Broken Link “Microsoft IIS”, is now https://docs.microsoft.com/en-us/iis (dregad)
  • 21376: [upgrade] Error in upgrade process 1.2.17 –> 1.3.0 (dregad)

MantisBT 2.15.1

Maintenance release for 2.15.x series.

  • 24580: [security] CVE-2018-13055: Reflected XSS in view filters page (dregad)
  • 24608: [security] CVE-2018-14504: XSS in edit filters page (atrol)

Go ahead and download the release from our website.

MantisBT 2.15.0 Released

In order to stay up to date with the latest MantisBT news and participate in our polls, please follow us on twitter and retweet to spread the word!

MantisBT 2.15.0

A feature release including functional improvements and bug fixes.

  • 0024437: [filters] Cannot save private filter if not allowed to save shared filter (community)
  • 0024496: [wiki] URL encoding precludes reasonable wiki root_namespace values (community)
  • 0024242: [bugtracker] Incorrect issue status setting when changing status (vboctor)
  • 0024388: [api rest] Support create project versions via REST API (vboctor)
  • 0024398: [tagging] Exception Missing Class (atrol)
  • 0024432: [security] Update-Blocker:User-ID instead of Realname
  • 0024139 as due to security policy requirements which prohibit IDs in mails and masks (atrol)
  • 0024435: [filters] show_user_realname_threshold is not considered when sorting by reporter or handler (atrol)
  • 0024436: [ui] Selecting users is not easy if show_realname is set to ON (atrol)
  • 0024470: [other] System warning if $g_log_destination = 'page' when using PHP 7.2 (atrol)
  • 0024462: [api soap] Error while querying for issue header with PHP 7.2 (atrol)
  • 0024476: [performance] Unneeded <meta> tag in <head> section (atrol)
  • 0024139: [ui] $g_show_realname for making usernames private (atrol)

Go ahead and download the release from our website.

MantisBT 2.14.0, 2.13.2, and 1.13.15 Released

In order to stay up to date with the latest MantisBT news and participate in our polls, please follow us on twitter and retweet to spread the word!

MantisBT 2.14.0

A feature release including functional improvements and bug fixes.

  • 0024192: [bugtracker] Update ADOdb to 5.20.12 (dregad)
  • 0024174: [code cleanup] E_DEPRECATED error on php7.2: each() function (dregad)
  • 0024196: [api rest] Update Slim Framework from 3.8.1 to 3.9.2 (vboctor)
  •  0024197: [api rest] Update GuzzleHttp from 6.3.0 to 6.3.2 (vboctor)
  • 0024220: [documentation] Wrong documentation of datetime_picker_format in Admin Guide (atrol)
  • 0024236: [code cleanup] IssueAddCommand Prevents API Folder Removal (atrol)
  • 0024325: [code cleanup] Code Cleanup (atrol)
  • 0024326: [documentation] Wrong documentation of my_view_boxes in Admin Guide (atrol)
  • 0024333: [api rest] Support getting a single project via REST API (vboctor)
  • 0024336: [administration] Plugin priority changed without being changed by user interaction (atrol)

MantisBT 2.13.2

Maintenance release for 2.13.x series.

  • 0024221: [security] CVE-2018-9839: Private issues accessible to unauthorized users using the “Clone” functionality (dregad)
  • 0024233: [markdown] Markdown quoting rendered with broken HTML (atrol)
  • 0024239: [email] Inconsistent realname display (atrol)
  • 0024335: [api rest] Get all filter or specific filter returns incorrect information (vboctor)
  • 0024343: [api rest] REST API returns too much info for default category handler (vboctor)
  • 0024346: [api rest] Don’t show category default handler for users that can’t manage the project (vboctor)
  • 0024349: [api soap] API method mc_filter_get does not work (vboctor)
  • 0024353: [code cleanup] mb_internal_encoding no longer being set because of removal utf8 library (atrol)
  • 0024355: [bugtracker] SYSTEM WARNING ‘count(): Parameter must be an array or an object that implements Countable’ in ‘IssueNoteAddCommand.php (atrol)

MantisBT 1.13.15

Security fixes for 1.3.x release series.

  • 0024365: [security] CVE-2018-9839: Private issues accessible to unauthorized users using the “Clone” functionality (dregad)

Go ahead and download the release from our website.

MantisBT 2.13.1 and 2.12.2 released

In order to stay up to date with the latest MantisBT news and participate in our polls, please follow us on twitter and retweet to spread the word!

Starting with MantisBT 2.13.0 the PHP mbstring extension is mandatory. Ensure that it is enabled on your server, or ask your provider if you are not the administrator of the server.

MantisBT 2.13.1

Maintenance release for 2.13.x series.

  • 0024202[markdown] Broken rendering of @ mentions, # issue and ~ note links (atrol)

MantisBT 2.12.2

Maintenance release for 2.12.x series.

  • 0024201[markdown] Broken rendering of @ mentions, # issue and ~ note links (atrol)

MantisBT 2.13.0

A feature release including functional improvements and bug fixes.

  • 0016070[email] Delay due to Mantis trying sending emails to non existent address (vboctor)
  • 0023498[filters] Filtering “note by” with “none” does not return any result (cproensa)
  • 0007264[filters] Not able to filter issues that have no relationship assigned (cproensa)
  •  0008167[filters] Filter settings saved when using Anonymous account (cproensa)
  •  0008204[filters] Filters not remembered when clicking through from “My View” (cproensa)
  • 0022785[api rest] Support adding attachments when reporting issues (vboctor)
  • 0023214[performance] Remove usage of outdated phputf8 library (atrol)
  • 0023998[code cleanup] Implement IssueAddCommand and use it from SOAP, REST and Web UI (vboctor)
  • 0023999[code cleanup] Implement IssueDeleteCommand and use it from SOAP, REST, and Web UI (vboctor)
  • 0024000[api rest] Add Issue REST API doesn’t trigger EVENT_REPORT_BUG_DATA plugin event (vboctor)
  • 0024001[api soap] Add Issue SOAP API doesn’t trigger EVENT_REPORT_BUG_DATA plugin event (vboctor)
  • 0024002[api rest] Add Issue REST API doesn’t trigger issue_create_validate custom function (vboctor)
  • 0024003[api soap] Add Issue SOAP API doesn’t trigger issue_create_validate custom function (vboctor)
  • 0024004[api rest] Add Issue REST API doesn’t trigger issue_create_notify custom function (vboctor)
  • 0024005[api soap] Add Issue SOAP API doesn’t trigger issue_create_notify custom function (vboctor)
  • 0024006[api rest] Add Issue REST API doesn’t trigger EVENT_REPORT_BUG plugin event (vboctor)
  • 0024007[api soap] Add Issue SOAP API doesn’t trigger EVENT_REPORT_BUG plugin event (vboctor)
  • 0024008[api rest] Add Issue REST API doesn’t add the issue to recent list (vboctor)
  • 0024009[api soap] Add Issue SOAP API doesn’t add the issue to recent list (vboctor)
  • 0010853[filters] In View Issues list, several columns are sorted by Id instead of display value (cproensa)
  • 0013177[filters] On ‘View Issues’ Page the filter does not allow user to select ‘blank’ (‘No Category’) Category (cproensa)
  • 0021865[filters] Filter out duplicated issues (cproensa)
  • 0021867[filters] Filter filed “relationships” resets its value when “duplicate of” is selected (cproensa)
  • 0023476[bugtracker] Can’t login if admin directory has restricted access (atrol)
  • 0023499[filters] Filtering with “note by” shows results from private notes for unprivileged users (cproensa)
  • 0023500[filters] Search filter returns matches in private notes for unprivileged users (cproensa)
  • 0023501[filters] Filter “monitored by” does not have option for “none” (cproensa)
  • 0023502[filters] Filter “assigned to” does not account for configuration “view_handler_threshold” (cproensa)
  • 0023504[filters] Filter “monitored by” does not account for configuration “show_monitor_list_threshold” (cproensa)
  • 0023506[filters] Filter tags inconsitent with OR filter operator (cproensa)
  • 0023538[filters] Filter field for relationship bug id is set to -1 by default (cproensa)
  • 0023549[db mysql] Entering Emojis in comments with a user mention crashes with an error (atrol)
  • 0024042[filters] filter on relationships mistuned by switching sort order (cproensa)
  • 0024056[custom fields] Custom Fields of type “Textarea” cannot contain more than 255 chars due to bug_history table (atrol)
  • 0024089[authentication] POST request to login_password_page.php return 405 when admin folder is deleted or access restricted (atrol)
  • 0024128[administration] Unable to start system check or installation with wrong PHP version (atrol)
  • 0024140[filters] Application error 401: “ORDER BY clause is not in SELECT list” when sorting by category or project (cproensa)
  • 0022376[documentation] Wrong documentation of string customization (atrol)
  • 0023161[timeline] Show File Attachment events in Timeline (dregad)
  • 0024158[bugtracker] Support providing a default value for issue description (vboctor)
  • 0024159[documentation] $g_default_bug_steps_to_reproduce not documented (vboctor)
  • 0024160[documentation] $g_default_bug_additional_info not documented (vboctor)

MantisBT 2.12.1

Maintenance release for 2.12.x series.

  • 0024186[security] Update Parsedown library to 1.7.1 (dregad)
  • 0024097[ui] Account page required change password on any field modification (atrol)
  • 0024090[ui] Username (Realnames) format not showing on timeline (my_view_page) (vboctor)
  • 0024161[timeline] Wrong color of username in timeline (atrol)
  • 0024167[bugtracker] History entries display realname instead of username (atrol)

Go ahead and download the release from our website.

MantisBT 2.12.0 released

A feature release including functional improvements and bug fixes.

  • 0010493: [code cleanup] Non-existent duplicate_realname column is updated by various functions in user_api.php (vboctor)
  • 0022509: [mentions] users with dashes in their name will not work when @mentioned (example @r-frank) (community)
  • 0023375: [mentions] It is hard to @ mention users when show realnames is enabled (vboctor)
  • 0023960: [plug-ins] EVENT_AUTH_USER_FLAGS should always be passed username rather than name (vboctor)
  • 0023961: [timeline] Identify Timeline tags operations with a specific icon (dregad)
  • 0023966: [code cleanup] Option session_handler not implemented (atrol)
  • 0023969: [performance] Minor performance and code enhancements of config functions (atrol)
  • 0024020: [localization] Update supported languages (siebrand)
  • 0024043: [ldap] $g_ldap_realname_field generates WARNING: field ‘givenName’ does not exist. (community)
  • 0023909: [administration] User realname uniqueness check doesn’t work (vboctor)

Starting with MantisBT 2.13.0 the PHP mbstring extension is mandatory. Ensure that it is enabled on your server, or ask your provider if you are not the administrator of the server.

In order to stay up to date with the latest MantisBT news and participate in our polls, please follow us on twitter and retweet to spread the word!

Go ahead and download the release from our website.