Changesets: MantisBT

master 915de954

2026-06-01 18:28

dregad


Details Diff
Remove safe_mode check from installer

Safe mode has been removed from PHP in 5.4.

Fixes 0037227
Affected Issues
0037227
mod - admin/install.php Diff File

master-2.28 f2191a0d

2026-06-01 17:42

dregad


Details Diff
Fix display of `<br>` tags in print_test_result()

Introduction of string_html_specialchars() broke the layout of a few
messages that rely `<br>`.

Fixes 0037103
Affected Issues
0037103
mod - admin/install.php Diff File

master 8ce3dfd6

2026-06-01 08:13

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net. [skip ci]
mod - lang/strings_turkish.txt Diff File
mod - plugins/MantisGraph/lang/strings_turkish.txt Diff File

master-2.28 813c49a7

2026-05-31 20:35

dregad


Details Diff
mc_issue_update() use current data as default

Prevents unexpected changes when a field is not supplied in the payload
(e.g. no 'reporter' results in Issue reporter being changed to the user
performing the update).

Fixes 0037075
Affected Issues
0037075
mod - api/soap/mc_issue_api.php Diff File

master a7e38077

2026-05-31 19:37

dregad


Details Diff
Align Admin Guide with config_defaults_inc.php

The webservice_specify_reporter_on_add_access_level_threshold config
was missing the 2nd paragraph from the PHODoc block.

Reworded text and updated both locations.

Issue 0037199
Affected Issues
0037199
mod - config_defaults_inc.php Diff File
mod - docbook/Admin_Guide/en-US/config/api.xml Diff File

master-2.28 6deaf6a4

2026-05-30 18:22

dregad


Details Diff
Fix static analysis warnings
mod - tests/soap/IssueUpdateTest.php Diff File

master-2.28 7a52a683

2026-05-30 18:21

dregad


Details Diff
Improve IssueUpdateTest

testUpdateWithTimeTrackingNote() is taking care of testing adding notes
with TIME_TRACKING type, so it is not needed in testUpdateWithNewNote().

testUpdateWithNewNote() now only deals with regular BUGNOTE type. A test
for adding a new note without re-posting the previous contents has been
added.

Adding a new test case testUpdateWithReminderNote() for REMINDER notes.

Issue 0037200
Affected Issues
0037200
mod - tests/soap/IssueUpdateTest.php Diff File

master-2.28 667e0640

2026-05-30 17:52

dregad


Details Diff
Fix broken PHPUnit tests

- Incorrect assignment of time_tracking duration in mc_issue_update()
- Adapt IssueUpdateTest::testUpdateWithNewNote()

Adding a TIME_TRACKING note (type 2) with note_attr makes no sense as
the latter is only used for REMINDER notes. TIME_TRACKING requires
a duration, which is set with `time_tracking` attribute.

Fixes 0037200
Affected Issues
0037200
mod - api/soap/mc_issue_api.php Diff File
mod - tests/soap/IssueUpdateTest.php Diff File

master-2.28 6eecc70a

2026-05-30 17:52

dregad


Details Diff
Fix broken PHPUnit tests

- Incorrect assignment of time_tracking duration in mc_issue_update()
- Adapt IssueUpdateTest::testUpdateWithNewNote()

Adding a TIME_TRACKING note (type 2) with note_attr makes no sense as
the latter is only used for REMINDER notes. TIME_TRACKING requires
a duration, which is set with `time_tracking` attribute.

Fixes 0037200
Affected Issues
0037200
mod - api/soap/mc_issue_api.php Diff File
mod - tests/soap/IssueUpdateTest.php Diff File

master-2.28 983310cd

2026-05-30 13:09

dregad


Details Diff
Use IssueNoteAddCommand from mc_issue_update()

Using the Command to add notes instead of calling bugnote_add() ensures
consistent behavior.

It also prevents unauthorized, low-privilege users from submitting
TIME_TRACKING notes with arbitrary duration via SOAP and REST API, or
REMINDER notes (SOAP only).

Fixes 0037200, GHSA-4vpf-w7qv-5h3q
Affected Issues
0037200
mod - api/soap/mc_issue_api.php Diff File

master-2.28 de2f71fd

2026-05-30 13:09

dregad


Details Diff
Use IssueNoteAddCommand from mc_issue_update()

Using the Command to add notes instead of calling bugnote_add() ensures
consistent behavior.

It also prevents unauthorized, low-privilege users from submitting
TIME_TRACKING notes with arbitrary duration via SOAP and REST API, or
REMINDER notes (SOAP only).

Fixes 0037200, GHSA-4vpf-w7qv-5h3q
Affected Issues
0037200
mod - api/soap/mc_issue_api.php Diff File

master-2.28 0ac87c39

2026-05-30 09:35

dregad


Details Diff
Prevent unauthorized update of `version` field (2)

Users below report_issues_for_unreleased_versions_threshold should not
be allowed to set an Issue's product version to an unreleased one.

This addresses the problem in the MantisBT UI - users could send a
crafted request to bug_report.php or bug_update.php

Added the necessary access checks to prevent that.

Fixes 0037065, GHSA-3v2j-6fw9-f57c
Affected Issues
0037065
mod - bug_update.php Diff File
mod - core/commands/IssueAddCommand.php Diff File

master-2.28 016f1055

2026-05-30 09:29

dregad


Details Diff
Prevent unauthorized update of `version` field

Users below report_issues_for_unreleased_versions_threshold should not
be allowed to set an Issue's product version to an unreleased one.

Added the necessary access check to prevent that.

Fixes 0037065, GHSA-3v2j-6fw9-f57c
Affected Issues
0037065
mod - api/soap/mc_issue_api.php Diff File

master 84b0fc3d

2026-05-30 09:27

dregad


Details Diff
Remove redundant assignment

$t_bugnote variable is already defined with the same value at line 1203.
mod - api/soap/mc_issue_api.php Diff File

master-2.28 6b248809

2026-05-30 09:22

dregad


Details Diff
New version_is_released() API function

Also added VersionData::is_released() method.

Issue 0037065
Affected Issues
0037065
mod - core/version_api.php Diff File

master 1c1e092b

2026-05-29 20:04

dregad


Details Diff
Doc: Updated entity-relationship diagram

- MySQL Workbench model rev 3 (schema version 215)
- Exported PDF
- Updated PNG for Dev Guide

Fixes 0019370
Affected Issues
0019370
mod - docbook/Developers_Guide/en-US/images/erd.png Diff File
mod - docbook/erd/mantisbt.mwb Diff File
rm - docbook/erd/mantisbt_2.23.0_210_erd_r2.pdf Diff
add - docbook/erd/mantisbt_2.29.0_210_erd_r3.pdf Diff File

master 46e5ceac

2026-05-29 20:04

dregad


Details Diff
Schema: drop unused user_print_pref table

Fixes 0019370
Affected Issues
0019370
mod - admin/schema.php Diff File

master f2886368

2026-05-29 20:02

dregad


Details Diff
Remove unused language strings

Fixes 0019370
Affected Issues
0019370
mod - lang/strings_afrikaans.txt Diff File
mod - lang/strings_amharic.txt Diff File
mod - lang/strings_arabic.txt Diff File
mod - lang/strings_arabicegyptianspoken.txt Diff File
mod - lang/strings_asturian.txt Diff File
mod - lang/strings_basque.txt Diff File
mod - lang/strings_belarusian_tarask.txt Diff File
mod - lang/strings_breton.txt Diff File
mod - lang/strings_bulgarian.txt Diff File
mod - lang/strings_catalan.txt Diff File
mod - lang/strings_chinese_simplified.txt Diff File
mod - lang/strings_chinese_traditional.txt Diff File
mod - lang/strings_czech.txt Diff File
mod - lang/strings_danish.txt Diff File
mod - lang/strings_dutch.txt Diff File
mod - lang/strings_english.txt Diff File
mod - lang/strings_esperanto.txt Diff File
mod - lang/strings_estonian.txt Diff File
mod - lang/strings_finnish.txt Diff File
mod - lang/strings_french.txt Diff File
mod - lang/strings_galician.txt Diff File
mod - lang/strings_georgian.txt Diff File
mod - lang/strings_german.txt Diff File
mod - lang/strings_greek.txt Diff File
mod - lang/strings_hebrew.txt Diff File
mod - lang/strings_hindi.txt Diff File
mod - lang/strings_hungarian.txt Diff File
mod - lang/strings_icelandic.txt Diff File
mod - lang/strings_interlingua.txt Diff File
mod - lang/strings_italian.txt Diff File
mod - lang/strings_japanese.txt Diff File
mod - lang/strings_korean.txt Diff File
mod - lang/strings_latvian.txt Diff File
mod - lang/strings_lithuanian.txt Diff File
mod - lang/strings_luxembourgish.txt Diff File
mod - lang/strings_macedonian.txt Diff File
mod - lang/strings_norwegian_bokmal.txt Diff File
mod - lang/strings_norwegian_nynorsk.txt Diff File
mod - lang/strings_occitan.txt Diff File
mod - lang/strings_persian.txt Diff File
mod - lang/strings_polish.txt Diff File
mod - lang/strings_portuguese_brazil.txt Diff File
mod - lang/strings_portuguese_standard.txt Diff File
mod - lang/strings_ripoarisch.txt Diff File
mod - lang/strings_romanian.txt Diff File
mod - lang/strings_russian.txt Diff File
mod - lang/strings_serbian.txt Diff File
mod - lang/strings_serbian_latin.txt Diff File
mod - lang/strings_serbo-croatian_latin.txt Diff File
mod - lang/strings_slovak.txt Diff File
mod - lang/strings_slovene.txt Diff File
mod - lang/strings_spanish.txt Diff File
mod - lang/strings_swedish.txt Diff File
mod - lang/strings_swissgerman.txt Diff File
mod - lang/strings_tagalog.txt Diff File
mod - lang/strings_turkish.txt Diff File
mod - lang/strings_ukrainian.txt Diff File
mod - lang/strings_urdu.txt Diff File
mod - lang/strings_vietnamese.txt Diff File
mod - lang/strings_volapuk.txt Diff File
mod - lang/strings_zazaki.txt Diff File

master e89a7235

2026-05-29 19:59

dregad


Details Diff
Remove unused print_all_bug_options code

Introduced in 2002, that was only used in the Excel export, and was
replaced in 2009 by the Manage Columns functionality.

Fixes 0019370
Affected Issues
0019370
rm - print_all_bug_options_inc.php Diff
rm - print_all_bug_options_page.php Diff
rm - print_all_bug_options_reset.php Diff
rm - print_all_bug_options_update.php Diff

master 06584820

2026-05-29 19:38

dregad


Details Diff
Use the first group of numbers as bug id

As suggested by @atrol in PR review,

Fixes 0037134
Affected Issues
0037134
mod - jump_to_bug.php Diff File

master-2.28 2d3a5537

2026-05-29 19:18

dregad


Details Diff
Check update_bug_status_threshold in mc_issue_update()

This missing check was allowing a user having update_bug_threshold to
change an Issue's status, even if their access level is below
update_bug_status_threshold.

Fixes 0037181, GHSA-m7ph-9558-mrx3, CVE-2026-49280
Affected Issues
0037181
mod - api/soap/mc_issue_api.php Diff File

master a095fb58

2026-05-28 12:25

dregad


Details Diff
Add mapping for serbo-croatian_latin language

See fa1aeb375c2685eeaea3cc1cb1da9c0dada2c071.

Fixes 0037110
Affected Issues
0037110
mod - config_defaults_inc.php Diff File

master 5bcf5c75

2026-05-28 08:06

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net. [skip ci]
mod - plugins/XmlImportExport/lang/strings_luxembourgish.txt Diff File

master fa1aeb37

2026-05-28 04:05

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net. [skip ci] Affected Issues
0037110
mv - lang/strings_sh-latn.txt → lang/strings_serbo-croatian_latin.txt Diff File

master 21886a5a

2026-05-25 13:12

raspopov

Committer: dregad


Details Diff
Fix plugin "can install" flag

The flag must be set for all requirements using an AND condition.
mod - manage_plugin_page.php Diff File
 First  Prev  1 2 3 ... 11 12 13 14 15 16 17 ... 80 ... 160 ... 240 ... 320 ... 400 ... 480 ... 560 ... 640 ... 720 ... 762 763 764  Next  Last