Changesets: MantisBT
|
master 065c99c3 2010-12-14 18:56 Details Diff |
Fix 0012607: Update installation instructions regarding admin directory The /admin/ directory should be removed after installation or upgrading of MantisBT. The installation instructions did not state this requirement and therefore it was quite easy for users to leave this potentially dangerous directory in place on live installations of MantisBT connected to the Internet. |
Affected Issues 0012607 |
|
| mod - doc/INSTALL | Diff File | ||
|
master-1.2.x 54aace93 2010-12-14 18:56 Details Diff |
Fix 0012607: Update installation instructions regarding admin directory The /admin/ directory should be removed after installation or upgrading of MantisBT. The installation instructions did not state this requirement and therefore it was quite easy for users to leave this potentially dangerous directory in place on live installations of MantisBT connected to the Internet. |
Affected Issues 0012607 |
|
| mod - doc/INSTALL | Diff File | ||
|
master 974e6da4 2010-12-14 18:40 Details Diff |
Fix 0012607: LFI/PD/XSS in upgrade_unattended.php Gjoko Krstic of Zero Science Lab has kindly reported in detail a number of vulnerabilities in the admin/upgrade_unattended.php script. Earlier patches by Victor Boctor (MantisBT developer) resolved the issue. This patch enhances those changes to strengthen the security of this script even further. Please note that the "admin" directory SHOULD BE DELETED AFTER INSTALLATION on all live instances of MantisBT. |
Affected Issues 0012607 |
|
| mod - admin/upgrade_unattended.php | Diff File | ||
|
master-1.2.x d67c4deb 2010-12-14 18:40 Details Diff |
Fix 0012607: LFI/PD/XSS in upgrade_unattended.php Gjoko Krstic of Zero Science Lab has kindly reported in detail a number of vulnerabilities in the admin/upgrade_unattended.php script. Earlier patches by Victor Boctor (MantisBT developer) resolved the issue. This patch enhances those changes to strengthen the security of this script even further. Please note that the "admin" directory SHOULD BE DELETED AFTER INSTALLATION on all live instances of MantisBT. |
Affected Issues 0012607 |
|
| mod - admin/upgrade_unattended.php | Diff File | ||
|
master-1.1.x 2641fdc6 2010-12-14 18:40 Details Diff |
Fix 0012607: LFI/PD/XSS in upgrade_unattended.php This is a backport of the fix applied to the 1.2.x and 1.3.x branches. Gjoko Krstic of Zero Science Lab has kindly reported in detail a number of vulnerabilities in the admin/upgrade_unattended.php script. Earlier patches by Victor Boctor (MantisBT developer) resolved the issue. This patch enhances those changes to strengthen the security of this script even further. Please note that the "admin" directory SHOULD BE DELETED AFTER INSTALLATION on all live instances of MantisBT. |
Affected Issues 0012607 |
|
| mod - admin/upgrade_unattended.php | Diff File | ||
|
master-1.2.x 1efe5be6 2010-12-14 03:24 Details Diff |
Fix 0012607: LFI/FD and XSS in the upgrade_unattended.php - part 2 |
Affected Issues 0012607 |
|
| mod - admin/upgrade_unattended.php | Diff File | ||
|
master 184a0f4a 2010-12-14 03:24 Details Diff |
Fix 0012607: LFI/FD and XSS in the upgrade_unattended.php - part 2 |
Affected Issues 0012607 |
|
| mod - admin/upgrade_unattended.php | Diff File | ||
|
master-1.2.x c6295994 2010-12-14 03:00 Details Diff |
Fix 0012607: LFI/FD and XSS in the upgrade_unattended.php |
Affected Issues 0012607 |
|
| mod - admin/upgrade_unattended.php | Diff File | ||
|
master 2af6e8dd 2010-12-14 03:00 Details Diff |
Fix 0012607: LFI/FD and XSS in the upgrade_unattended.php |
Affected Issues 0012607 |
|
| mod - admin/upgrade_unattended.php | Diff File | ||
|
master 2a7fe6dd 2010-12-10 15:56 Details Diff |
Fixes 0012601: Upgrading scripts sometimes fails with a server error in case of large databases |
Affected Issues 0012601 |
|
| mod - core/install_helper_functions_api.php | Diff File | ||
|
master-1.2.x 93b32ea2 2010-12-10 15:48 Details Diff |
Fix 0012601: Upgrading scripts sometimes fails with a server error in case of large databases. |
Affected Issues 0012601 |
|
| mod - admin/install_functions.php | Diff File | ||
|
master-1.2.x 7ab54d22 2010-11-30 12:45 Details Diff |
Localisation updates from translatewiki.net. | ||
| mod - lang/strings_portuguese_standard.txt | Diff File | ||
| mod - lang/strings_hebrew.txt | Diff File | ||
| mod - lang/strings_russian.txt | Diff File | ||
| mod - lang/strings_slovene.txt | Diff File | ||
| mod - lang/strings_macedonian.txt | Diff File | ||
| mod - lang/strings_turkish.txt | Diff File | ||
| mod - lang/strings_chinese_simplified.txt | Diff File | ||
| mod - lang/strings_french.txt | Diff File | ||
| mod - lang/strings_dutch.txt | Diff File | ||
| mod - lang/strings_belarusian_tarask.txt | Diff File | ||
| mod - lang/strings_korean.txt | Diff File | ||
|
master dd455351 2010-11-30 10:33 Details Diff |
Fix Bug 0012489: resolution is not updated on re-open The reopen resolution must be set for everyone with permission to reopen an issue. Not just the reporter. |
Affected Issues 0012489 |
|
| mod - bug_update.php | Diff File | ||
|
master 48a898c2 2010-11-30 07:03 Damien Regad Committer: dhx Details Diff |
Fix 0012568: Enforce bug monitoring visibility in history Only users with access level above show_monitor_list_threshold should be allowed to see monitoring-related events in the bug history. Signed-off-by: David Hicks <hickseydr@optusnet.com.au> |
Affected Issues 0012568 |
|
| mod - core/history_api.php | Diff File | ||
|
master-1.2.x 4db660f5 2010-11-30 07:03 Damien Regad Committer: dhx Details Diff |
Fix 0012568: Enforce bug monitoring visibility in history Only users with access level above show_monitor_list_threshold should be allowed to see monitoring-related events in the bug history. Signed-off-by: David Hicks <hickseydr@optusnet.com.au> |
Affected Issues 0012568 |
|
| mod - core/history_api.php | Diff File | ||
|
master 6baa6016 2010-11-29 16:52 Details Diff |
Minimal build instructions for Publican based documentation | ||
| add - docbook/README | Diff File | ||
|
master 8a6228ca 2010-11-29 16:51 Details Diff |
Fix bug 0012566: Time Tracking: copy wiki note in administration_guide Provided patch was adapted to new xml manual based on Publican |
Affected Issues 0012566 |
|
| mod - docbook/Admin_Guide/en-US/Project_Management.xml | Diff File | ||
| mod - docbook/Admin_Guide/en-US/Configuration.xml | Diff File | ||
|
master-1.2.x ec291be6 2010-11-26 11:36 Cyrille Giquello Committer: giallu Details Diff |
Fix bug 0012566: Time Tracking: copy wiki note in administration_guide Add documentation about Time Tracking in sections 'admin.config.timetracking' and 'admin.project.timetracking'. It's a simple copy/paste from the Wiki. |
Affected Issues 0012566 |
|
| mod - docbook/adminguide/en/configuration.sgml | Diff File | ||
| mod - docbook/adminguide/en/project_management.sgml | Diff File | ||
|
master 0e2335cf 2010-11-25 17:07 Committer: rombert Details Diff |
Normalize the attachment path when using the SOAP API Fixes: 0012540: mc_issue_attachment_get does not use the path for the file Signed-off-by: Robert Munteanu <robert.munteanu@gmail.com> |
||
| mod - api/soap/mc_file_api.php | Diff File | ||
|
master-1.2.x 6f7d05e5 2010-11-25 17:07 Committer: rombert Details Diff |
Normalize the attachment path when using the SOAP API Fixes: 0012540: mc_issue_attachment_get does not use the path for the file Signed-off-by: Robert Munteanu <robert.munteanu@gmail.com> |
||
| mod - api/soap/mc_file_api.php | Diff File | ||
|
master-1.2.x 802bfcfc 2010-11-24 12:34 Damien Regad Committer: dhx Details Diff |
Fix 0012167: Improved LDAP error handling and logging Created a new ldap_log_error function that will call log_event with the code and description of the last LDAP error. This is used after each failed call to a PHP ldap function. Improved the error handling of PHP ldap calls, some error cases were not covered Signed-off-by: David Hicks <d@hx.id.au> |
Affected Issues 0012167 |
|
| mod - core/ldap_api.php | Diff File | ||
|
master e45cfb8d 2010-11-23 10:10 Damien Regad Committer: dhx Details Diff |
Fix 0012552: Periods should not be used in g_cookie_prefix Modified comment in config_defaults_inc.php to document this. The administration guide documentation has also been updated. Signed-off-by: David Hicks <hickseydr@optusnet.com.au> |
Affected Issues 0012552 |
|
| mod - config_defaults_inc.php | Diff File | ||
| mod - docbook/Admin_Guide/en-US/Configuration.xml | Diff File | ||
|
master-1.2.x e28dae6a 2010-11-23 10:10 Damien Regad Committer: dhx Details Diff |
Fix 0012552: Periods should not be used in g_cookie_prefix Modified comment in config_defaults_inc.php to document this. The administration guide documentation has also been updated. Signed-off-by: David Hicks <hickseydr@optusnet.com.au> |
Affected Issues 0012552 |
|
| mod - config_defaults_inc.php | Diff File | ||
| mod - docbook/adminguide/en/configuration.sgml | Diff File | ||
|
master 9483d52f 2010-11-22 04:46 Kirill Krasnov Committer: dhx Details Diff |
Fix 0012846: Escape translation string user tag-chars such Russian <Метки> Signed-off-by: David Hicks <hickseydr@optusnet.com.au> |
Affected Issues 0012846 |
|
| mod - core/print_api.php | Diff File | ||
|
master-1.2.x f190021f 2010-11-22 04:46 Kirill Krasnov Committer: dhx Details Diff |
Fix 0012846: Escape translation string user tag-chars such Russian <Метки> Signed-off-by: David Hicks <hickseydr@optusnet.com.au> |
Affected Issues 0012846 |
|
| mod - core/print_api.php | Diff File | ||
