MantisBT 2.11.0, 2.10.1, and 1.3.14 released

MantisBT 2.11.0

Feature release

  • 23754: [code cleanup] Code cleanup (atrol)
  • 23876: [installation] Running admin/check fails (dregad)
  • 23900: [administration] Unable to update user access level, due to check on ‘Realname’ returning KO (APPLICATION ERROR #807) (vboctor)
  • 23776: [attachments] Support adding attachments that were not uploaded via the browser (vboctor)
  • 23899: [api rest] Relationship type was localized in GET issue API (vboctor)
  • 23706: [administration] trigger_error() with errors must terminate scripts rather than being config based (vboctor)
  • 23714: [api rest] Failing REST API requests should include Mantis error code and localized message (vboctor)
  • 23762: [api rest] Support adding users to monitor an issue via REST API (vboctor)
  • 23772: [api rest] Support attachments when adding notes via REST API (vboctor)
  • 23773: [api rest] Support time tracking when adding notes via REST API (vboctor)
  • 23780: [api rest] Return status code 429 when hitting spam check limits (vboctor)
  • 23784: [api rest] REST and SOAP API send two email notifications for mentioned users (vboctor)
  • 23785: [api rest] Adding notes via SOAP and REST API with time tracking uses incorrect access check (vboctor)
  • 23786: [code cleanup] Implement IssueNoteDeleteCommand for deleting notes (vboctor)
  • 23787: [administration] Protected admin users can’t be unprotected (atrol)
  • 23830: [security] Update PHPMailer to 5.2.26 (dregad)
  • 11327: [reports] “Developer By Resolution” is the only box in the Summary page not ordered (at least it doesn’t seem to be any logic behind it) (dregad)
  • 12978: [code cleanup] Summary – Time Stats For Resolved Issues (days) (dregad)
  • 22792: [api rest] Support downloading issue attachments (vboctor)
  • 23627: [feature] Summary page enhancement with bugs ratio support (dregad)
  • 23758: [ui] Allow users to select font family that fits them best (syncguru)
  • 23774: [code cleanup] Implement IssueNoteAddCommand to share code for adding notes (vboctor)
  • 23796: [reports] Filter links for resolved/closed custom statuses in Summary By Status report are incorrect (dregad)
  • 23828: [api rest] Support adding attachments to existing issues via REST API (vboctor)
  • 23837: [code cleanup] Implement UserCreateCommand to create users (vboctor)
  • 23838: [api rest] Create user via REST API (vboctor)
  • 23839: [code cleanup] Implement UserDeleteCommand for deleting users (vboctor)
  • 23840: [api rest] Delete user via REST API (vboctor)
  • 23854: [reports] Summary: always show the “By Project” box (dregad)
  • 23855: [code cleanup] Implement TagAttachCommand for attaching tags (vboctor)
  • 23856: [code cleanup] Implement TagDetachCommand to detach tags (vboctor)
  • 23857: [api rest] Add REST API to attach a tag (vboctor)
  • 23858: [api rest] Add REST API to detach a tag (vboctor)
  • 23863: [reports] Summary: Reporter and Developer by Resolution miss a Total column (dregad)
  • 23865: [code cleanup] Implement IssueRelationshipAddCommand to add relationships (vboctor)
  • 23866: [api rest] Support adding relationships via REST API (vboctor)
  • 23867: [code cleanup] Implement IssueRelationshipDeleteCommand (vboctor)
  • 23868: [api rest] Support deleting issue relationships via REST API (vboctor)
  • 23898: [api rest] Some relationships are not formatted correctly in GET issue rest API (vboctor)
  • 23775: [attachments] Remove obsolete code that checks if PHP file info API is defined (vboctor)
  • 23926: [ui] Footer displayed under sidebar on error page when $g_show_detailed_errors = ON (dregad)
  • 23925: [security] Site path leakage in error handler (vboctor)
  • 23930: [installation] Make Fileinfo a mandatory PHP extension (atrol)
  • 23944: [bugtracker] The stack trace on detailed error page should not include the error handler itself (dregad)
  • 23942: [bugtracker] Remove deprecated “errcontext” parameter from standard error handler (dregad)
  • 23943: [bugtracker] Improve detailed error page layout (dregad)

MantisBT 2.10.1

Maintenance release for 2.10.x series

  • 23746: [api soap] unable to create a bug with customfields via SOAP (vboctor)
  • 23765: [api rest] Wrong constructor name in class FilterConverter (atrol)
  • 23924: [relationships] Resolving as duplicate does not add reporter and handler to monitoring list of duplicate issue (atrol)
  • 23906: [security] CVE-2018-6403: XSS in adm_config_report.php ‘value’ parameter (dregad)

MantisBT 1.3.14

Maintenance release for 1.3.x series

  • 23918: [security] CVE-2018-6403: XSS in adm_config_report.php ‘value’ parameter (dregad)

Go ahead and download the release from our website.