Mantis Bug Tracker - Forums

atrol wrote: 20 Aug 2018, 13:21

dvl wrote: 20 Aug 2018, 12:33 The vendor directory was included in GitHub releases prior to 2.16.0

Really? Please provide a link.

I got this wrong, sorry. My error.

I was downloading from SF, not GH. I apologize.

The vendor directory was included in GitHub releases prior to 2.16.0

Was the omission of the vendor directory for 2.16.0 done on purpose?

Will the vendor directory be missing from all future GitHub releases?

I ask because 2.16.0 is currently broken on FreeBSD because it uses GitHub. Knowing the ...

Is there a reason why the vendor directory is missing from the tarball on github? I'm guessing it is because GitHub is your working copy and SourceForge is your release proper.

[dan@pro02:~/tmp/mantisbt-release-2.16.0] $ find . -name vendor
[dan@pro02:~/tmp/mantisbt-release-2.16.0] $

But that ...

I'm still using 0.18.3 on a public server. Looking through the change logs I found nothing that says 0.18.3 is vulnerable and should be upgraded.

Did I miss something? Are there any known vulnerabilities associated with 0.18.3?

cheers

I have been reading the documentation and user comments on the removal of $g_to_email. The documentation refers to creating a dummy user with "appropriate access level". I seem unable to do this.

I am using Mantis 1.0.0a3.

I have created a dummy user and given them the email address of a mailing ...