MantisBT 2.14.0, 2.13.2, and 1.13.15 Released

In order to stay up to date with the latest MantisBT news and participate in our polls, please follow us on twitter and retweet to spread the word!

MantisBT 2.14.0

A feature release including functional improvements and bug fixes.

• 0024192: [bugtracker] Update ADOdb to 5.20.12 (dregad)
• 0024174: [code cleanup] E_DEPRECATED error on php7.2: each() function (dregad)
• 0024196: [api rest] Update Slim Framework from 3.8.1 to 3.9.2 (vboctor)
•  0024197: [api rest] Update GuzzleHttp from 6.3.0 to 6.3.2 (vboctor)
• 0024220: [documentation] Wrong documentation of datetime_picker_format in Admin Guide (atrol)
• 0024236: [code cleanup] IssueAddCommand Prevents API Folder Removal (atrol)
• 0024325: [code cleanup] Code Cleanup (atrol)
• 0024326: [documentation] Wrong documentation of my_view_boxes in Admin Guide (atrol)
• 0024333: [api rest] Support getting a single project via REST API (vboctor)
• 0024336: [administration] Plugin priority changed without being changed by user interaction (atrol)

MantisBT 2.13.2

Maintenance release for 2.13.x series.

• 0024221: [security] CVE-2018-9839: Private issues accessible to unauthorized users using the “Clone” functionality (dregad)
• 0024233: [markdown] Markdown quoting rendered with broken HTML (atrol)
• 0024239: [email] Inconsistent realname display (atrol)
• 0024335: [api rest] Get all filter or specific filter returns incorrect information (vboctor)
• 0024343: [api rest] REST API returns too much info for default category handler (vboctor)
• 0024346: [api rest] Don’t show category default handler for users that can’t manage the project (vboctor)
• 0024349: [api soap] API method mc_filter_get does not work (vboctor)
• 0024353: [code cleanup] mb_internal_encoding no longer being set because of removal utf8 library (atrol)
• 0024355: [bugtracker] SYSTEM WARNING ‘count(): Parameter must be an array or an object that implements Countable’ in ‘IssueNoteAddCommand.php (atrol)

MantisBT 1.13.15

Security fixes for 1.3.x release series.

• 0024365: [security] CVE-2018-9839: Private issues accessible to unauthorized users using the “Clone” functionality (dregad)

Go ahead and download the release from our website.