APPLICATION ERROR #29 field product version

[rweiss]

Hi,
we updated to 2.28.4 and got problems when users try to create a new issue. Whenever they chose a product version (released, not obsolete) their issue was rejected with APPLICATION ERROR #29.

This relates to:
0037065: [security] CVE-2026-52882: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters (dregad)

As our users are of role UPDATER, the above „fix“ does not care if the product version is released are not and did not allow to choose this version.

As a workaround we set `$g_report_issues_for_unreleased_versions_threshold = UPDATER;` but this should be fixed withe next release please.

[atrol]

Known regression, patch available see https://mantisbt.org/bugs/view.php?id=37320