mantisbt-announce — Get notified of major releases, security updates, etc.

[mantisbt-announce] MantisBT 1.2.17 released

[Victor B. <vb...@gm...>]

MantisBT 1.2.17 is a security update for the stable 1.2.x branch.
All installations that are currently running any 1.2.x version are strongly
advised to upgrade to this release.

A SQL injection vulnerability (CVE-2014-2238) in adm_config_report.php was
patched. Refer to issue
#17055<http://www.mantisbt.org/bugs/view.php?id=17055> for
detailed information.

For more details see blog post at http://www.mantisbt.org/blog/?p=288

Thanks,
MantisBT Team

[mantisbt-announce] MantisBT 1.2.16 Released

[Victor B. <vb...@gm...>]

MantisBT 1.2.16 is a security update for the stable 1.2.x branch. All
installations that are currently running any 1.2.x version are strongly
advised to upgrade to this release.

This release also includes many bug fixes and enhancements to the tracker
and the SOAP api, as well as updated translations in many languages.

For more details see blog post:
http://www.mantisbt.org/blog/?p=275

Thanks,
MantisBT Team

[mantisbt-announce] MantisBT 1.2.15 Released

[Victor B. <vb...@gm...>]

Blog Post: http://www.mantisbt.org/blog/?p=249

MantisBT 1.2.15 is a security update for the stable 1.2.x branch.
All installations that are currently running any 1.2.x version are strongly
advised to upgrade to this release.

The following security issues were resolved:

   - Any malicious user could use the view issues page (search.php) to
   execute a filter that could bring down the site by overloading the
   database server (CVE-2013-1883). Affects MantisBT 1.2.12 and later.  Refer
   to issue #15573 <http://www.mantisbt.org/bugs/view.php?id=15573> for
   detailed information.
   - A cross site scripting (XSS) vulnerability allowed execution of
   arbitrary JavaScript code when deleting a version. Affects MantisBT
   1.2.14 and later. Refer to issue
#15511<http://www.mantisbt.org/bugs/view.php?id=15511> for
   detailed information.
   - In some cases, the ‘Close’ button would be available to unauthorized
   users, allowing them to close issues at will, bypassing the workflow
   settings. Affects MantisBT 1.2.12 and later. Refer to issue
#15453<http://www.mantisbt.org/bugs/view.php?id=15453> for
   detailed information.

This release also includes several bug fixes and enhancements to the
tracker and the SOAP api, as well as updated translations in many languages.

A full changelog for 1.2.15 can be found at
here<http://www.mantisbt.org/bugs/changelog_page.php?version_id=182>.
 Go ahead and download <http://www.mantisbt.org/download.php> it now.

Checkout Hosted MantisBT <http://www.mantisbt.org/hosting.php> to be up and
running in minutes.  For optimized access to MantisBT from iPhone, Android
and Windows Phone checkout MantisTouch <http://www.mantistouch.org/>.
Thanks,
-MantisBT Team

[mantisbt-announce] MantisBT 1.2.14 Released

[Victor B. <vb...@gm...>]

Blog Post: http://www.mantisbt.org/blog/?p=244

MantisBT 1.2.14 is a security update for the stable 1.2.x branch.
All installations that are currently running any 1.2.x version are strongly
advised to upgrade to this release.

The following release notes are relative to 1.2.12 (rather than 1.2.13).

Four cross site scripting (XSS) vulnerability issues were discovered
and resolved:

   - A malicious person could trick a target user’s browser into
   executing arbitrary JavaScript code (CVE-2013-0197). This vulnerability is
   critical, due to the affected page (search.php) being usable anonymously on
   public-facing installations (i.e. without the need for a user login).
    Affects MantisBT 1.2.12 only (earlier versions are not impacted).  Refer
   to issue #15373 <http://www.mantisbt.org/bugs/view.php?id=15373> for
   detailed information.
   - A user holding manager/administrator permissions could create a
   category or project name containing JavaScript code; from that point on,
   visitors to (a) the Summary page (summary.php) as well as (b) the
   Configuration Report page (adm_config_report.php), are exposed to having
   the JavaScript execute within their browser environment. The severity of
   this issue is mitigated by the need to have a privileged account to modify
   category and project names. Issue (a) affects MantisBT version 1.2.12 and
   above, while (b) is on 1.2.13 only; earlier releases are not impacted.
    Refer to issues #15384 <http://www.mantisbt.org/bugs/view.php?id=15384> (a)
   and#15415 <http://www.mantisbt.org/bugs/view.php?id=15415> (b) for
   detailed information.
   - An administrator could enter a configuration option containing
   javascript code, which would then be executed when displaying the
   Configuration Report page (adm_config_report.php). The severity of this
   issue is mitigated by the need to have a privileged account. Affects all
   MantisBT 1.2.x versions.  Refer to issue
#15416<http://www.mantisbt.org/bugs/view.php?id=15416> for
   detailed information.

A workflow-related security issue was also fixed:

   - A user with “Reporter” permissions can modify the workflow status of
   any issue to “New” even if they do not have the necessary privileges to
   make this change.  Refer to issue
#15258<http://www.mantisbt.org/bugs/view.php?id=15258> for
   detailed information.

In addition to the corrections for the above-mentioned security issues,
this release also includes several bug fixes and enhancements:

   - improved Manage Configuration page (better performance, ability to
   filter and edit config options)
   - support for the built-in SOAP extension in addition to nusoap
   - updated translations in many languages

A full changelog for 1.2.14 can be found at
here<http://www.mantisbt.org/bugs/changelog_page.php?version_id=180>.
 Go ahead and download <http://www.mantisbt.org/download.php> it now.

Checkout Hosted MantisBT <http://www.mantisbt.org/hosting.php> to be up and
running in minutes.  For optimized access to MantisBT from iPhone, Android
and Windows Phone checkout MantisTouch <http://www.mantistouch.org/>.

Thanks,
-MantisBT team

Re: [mantisbt-announce] MantisBT 1.2.13 Release (security release)

[Victor B. <vb...@gm...>]

This release was pulled out shortly after release since we figured an
introduced bug where the View Issues page consumes significantly more
memory for instances with large numbers of users (order 10k+).  We are
planning to release 1.2.14 shortly.


On Tue, Jan 22, 2013 at 10:55 PM, Victor Boctor <vb...@gm...> wrote:

> blog post: http://www.mantisbt.org/blog/?p=236
>
> MantisBT 1.2.13 is a security update for the stable 1.2.x branch.
> All installations that are currently running any 1.2.x version are strongly
> advised to upgrade to this release.
>
> Two cross site scripting (XSS) vulnerability issues affecting MantisBT
> 1.2.12 only (earlier versions are not impacted) were discovered:
>
>    - *CVE-2013-0197*: a malicious person could trick the browser of a
>    target user into executing arbitrary JavaScript code. This
>    vulnerability is particularly wide-reaching due to the affected page
>    (search.php) being usable anonymously on public-facing installations (i.e.
>    no user login required).  Refer to issue #15373<http://www.mantisbt.org/bugs/view.php?id=15373> for
>    detailed information.
>    - *CVE-2013-XXXX*: A user holding manager/administrator permissions
>    could create a category or project name containing JavaScript code;
>    from that point on,  visitors to the Summary page (summary.php) are exposed
>    to having the JavaScript execute within their browser environment. The
>    severity of this issue is mitigated by the need to have a privileged
>    account to modify category and project names.  Refer to issue #15384<http://www.mantisbt.org/bugs/view.php?id=15384> for
>    detailed information.
>
> A workflow-related security issue was also fixed:
>
>    - *CVE-2013-XXXX*: a user with “Reporter” permissions can modify the
>    workflow status of any issue to “New” even if they do not have the
>    necessary privileges to make this change.  Refer to issue #15258<http://www.mantisbt.org/bugs/view.php?id=15258> for
>    detailed information.
>
> In addition to the corrections for the above-mentioned security issues,
> this release also includes several bug fixes and enhancements:
>
>    - Improved Manage Configuration page (better performance, ability to
>    filter and edit config options)
>    - Support for the built-in SOAP extension in addition to nusoap
>
> A full changelog for 1.2.13 can be found at here<http://www.mantisbt.org/bugs/changelog_page.php?version_id=180>.
>  Go ahead and download <http://www.mantisbt.org/download.php> it now.
>
> Checkout Hosted MantisBT <http://www.mantisbt.org/hosting.php> to be up
> and running in minutes.  For optimized access to MantisBT from iPhone,
> Android and Windows Phone checkout MantisTouch<http://www.mantistouch.org/>
> .
>
> Thanks,
> Mantis Team
>

[mantisbt-announce] MantisBT 1.2.13 Release (security release)

[Victor B. <vb...@gm...>]

blog post: http://www.mantisbt.org/blog/?p=236

MantisBT 1.2.13 is a security update for the stable 1.2.x branch.
All installations that are currently running any 1.2.x version are strongly
advised to upgrade to this release.

Two cross site scripting (XSS) vulnerability issues affecting MantisBT
1.2.12 only (earlier versions are not impacted) were discovered:

   - *CVE-2013-0197*: a malicious person could trick the browser of a
   target user into executing arbitrary JavaScript code. This vulnerability
   is particularly wide-reaching due to the affected page (search.php) being
   usable anonymously on public-facing installations (i.e. no user login
   required).  Refer to issue
#15373<http://www.mantisbt.org/bugs/view.php?id=15373> for
   detailed information.
   - *CVE-2013-XXXX*: A user holding manager/administrator permissions
   could create a category or project name containing JavaScript code; from
   that point on,  visitors to the Summary page (summary.php) are exposed to
   having the JavaScript execute within their browser environment. The
   severity of this issue is mitigated by the need to have a privileged
   account to modify category and project names.  Refer to issue
#15384<http://www.mantisbt.org/bugs/view.php?id=15384> for
   detailed information.

A workflow-related security issue was also fixed:

   - *CVE-2013-XXXX*: a user with “Reporter” permissions can modify the
   workflow status of any issue to “New” even if they do not have the
   necessary privileges to make this change.  Refer to issue
#15258<http://www.mantisbt.org/bugs/view.php?id=15258> for
   detailed information.

In addition to the corrections for the above-mentioned security issues,
this release also includes several bug fixes and enhancements:

   - Improved Manage Configuration page (better performance, ability to
   filter and edit config options)
   - Support for the built-in SOAP extension in addition to nusoap

A full changelog for 1.2.13 can be found at
here<http://www.mantisbt.org/bugs/changelog_page.php?version_id=180>.
 Go ahead and download <http://www.mantisbt.org/download.php> it now.

Checkout Hosted MantisBT <http://www.mantisbt.org/hosting.php> to be up and
running in minutes.  For optimized access to MantisBT from iPhone, Android
and Windows Phone checkout MantisTouch <http://www.mantistouch.org/>.

Thanks,
Mantis Team

[mantisbt-announce] MantisBT 1.2.12 Released

[Victor B. <vb...@gm...>]

MantisBT 1.2.12 is a maintenance update for the stable 1.2.x branch that
resolves over 70 issues mainly in the following categories: security, MS
SQL and PostgreSQL database support, change log page, custom fields,
installation, attachments, SOAP API (including
MantisTouch<http://www.mantistouch.org/> related fixes),
XML import/export plugin, email (including update of phpMailer to v5.2.1)
and others.

All installations that are currently running any 1.2.x or older version
are advised to upgrade to this release.

A full changelog for 1.2.12 can be found at
here<http://www.mantisbt.org/bugs/changelog_page.php?version_id=150>.
 Go ahead and download <http://www.mantisbt.org/download.php> it now.

For optimized access to MantisBT from iPhone, Android and Windows Phone
checkout MantisTouch <http://www.mantistouch.org/>.

Cheers,
-MantisBT Team

[mantisbt-announce] MantisBT 1.2.11 Released

[Victor B. <vb...@gm...>]

MantisBT 1.2.11 is a security update for the stable 1.2.x branch.
All installations that are currently running any 1.2.x or older version
are advised to upgrade to this release.

This release also contains numerous minor bug fixes to MantisBT, SOAP API
fixes, enhancements to the admin guide and improved translations in
many languages.

The SOAP API fixes also addresses the
MantisTouch<http://www.mantistouch.org/> “login
failure” error that was caused by php warnings in configuration that was
surfaced in the SOAP API but not the web interface.

A full changelog for 1.2.11 can be found at
here<http://www.mantisbt.org/bugs/changelog_page.php?version_id=148>.
 Go ahead and download <http://www.mantisbt.org/download.php> it now.

For optimized access to MantisBT from iPhone, Android and Windows Phone
checkout MantisTouch <http://www.mantistouch.org/>.

Cheers,
-MantisBT Team

[mantisbt-announce] MantisBT 1.2.10 released

[Victor B. <vb...@gm...>]

MantisBT 1.2.10 is a maintenance release. All installations that are
currently running any 1.2.x version or older are advised to upgrade to this
release.

A full changelog for 1.2.10 can be found at:
http://www.mantisbt.org/bugs/changelog_page.php?version_id=146

The release can be downloaded at:
http://www.mantisbt.org/download.php

Checkout Hosted MantisBT <http://www.mantisbt.org/hosting.php> to be up and
running in minutes.  For optimized access to MantisBT from iPhone, Android
and Windows Phone checkout MantisTouch <http://www.mantistouch.org/>.

Cheers,
-Mantis Team

[mantisbt-announce] MantisBT 1.2.9 released

[Victor B. <vb...@gm...>]

MantisBT 1.2.9 release delivers 92 fixes and improvements including
security fixes, new MantisBT logo,
MantisTouch<http://www.mantisbt.org/mantistouch.php> integration,
MS SQL fixes, SOAP API improvements, and others.  We recommend that all
instances be upgraded to this release.

A full changelog for 1.2.9 can be found at:
http://www.mantisbt.org/bugs/changelog_page.php?version_id=140

The release can be downloaded at:
http://www.mantisbt.org/download.php

For optimized access to MantisBT from iPhone, Android and Windows Phone
checkout MantisTouch <http://www.mantisbt.org/mantistouch.php>.

Cheers,
-Mantis Team

[mantisbt-announce] New IRC Channels

[John R. <jo...@no...>]

Howdy All,

I would like to announce a some changes to the IRC channels used for the 
MantisBT project.  I've registered a formal MantsBT group with Freenode, 
which has given us control of the mantisbt "namespace".

This means that we now have the #mantisbt channel, which will be used 
specifically for development discussions and random off topic chatter.

Our existing IRC channel #mantishelp is being moved to #mantisbt-help, 
and will be reserved for questions and support for end users.  The 
current #mantishelp channel is set up to forward users appropriately, 
but will be disbanded after a few weeks time.  The web client on 
mantisbt.org is already updated to send users to the correct channel.

Please update your IRC clients with the new channels names.

Cheers

-- 
John Reese
noswap.com

[mantisbt-announce] MantisBT 1.2.8 Released

[John R. <jo...@no...>]

Hi all,

MantisBT 1.2.8 is a security update for the stable 1.2.x branch. All
installations that are currently running any 1.2.x version are advised 
to upgrade to this release.

Paulino Calderon from Websec, High-Tech Bridge Security Research Lab and 
Paul Richards discovered 3 vulnerabilities:
  - 1x local file inclusion (LFI)/directory traversal
  - 2x cross site scriptin (XSS)

These vulnerabilities could have very severe consequences for users of
MantisBT, particularly as a result of the local file inclusion 
vulnerability. If an attacker can upload their own PHP script to the 
server as an attachment, they may be able to execute this script using 
the LFI vulnerability.

Refer to issues #13191 and #13281 for detailed information:

   http://www.mantisbt.org/bugs/view.php?id=13191
   http://www.mantisbt.org/bugs/view.php?id=13281

A full changelog for 1.2.8 can be found at:

   http://www.mantisbt.org/bugs/changelog_page.php?version_id=139

The release can be downloaded at:

   http://www.mantisbt.org/download.php

Cheers

-- 
John Reese
noswap.com

[mantisbt-announce] MantisBT 1.2.7 Released

[John R. <jo...@no...>]

Howdy all,

MantisBT 1.2.7 is a security update for the stable 1.2.x branch. All 
installations that are currently running any 1.2.x version are advised 
to upgrade to this release.

Net.Edit0r from BlACK Hat Group posted a vulnerability report for an XSS 
issue in search.php. All MantisBT users (including anonymous users that 
are not logged in to public bug trackers) could be impacted by this 
vulnerability. Refer to issue #13245 [1] for full details.

This release also contains numerous minor bug fixes to MantisBT and 
improved translations in many languages.

A full changelog for 1.2.7 can be found on the official site:
   http://www.mantisbt.org/bugs/changelog_page.php?version_id=138

The release can be downloaded from:
   http://www.mantisbt.org/download.php

[1] http://www.mantisbt.org/bugs/view.php?id=13245

Cheers

-- 
John Reese
noswap.com

[mantisbt-announce] MantisBT 1.2.6 Released

[John R. <jo...@no...>]

Hi all,

MantisBT 1.2.6 is a maintenance update for the stable 1.2.x branch. It 
is recommended that all MantisBT users (including those still using 
1.1.x or earlier versions) upgrade to this latest release.

This release brings bug fixes and improvements across a range of 
MantisBT features, especially the SOAP API, authentication, time 
tracking, and billing areas. Documentation and translation updates are 
also included.

A full changelog for 1.2.6 can be found on the official site:
    http://www.mantisbt.org/bugs/changelog_page.php?version_id=114

The release is available for download at:
    http://www.mantisbt.org/download.php

Cheers

-- 
John Reese
noswap.com

[mantisbt-announce] MantisBT Moving to Github

[John R. <jo...@no...>]

Hi all,

I'd like to announce that as of now, the primary Git repositories for 
the MantisBT project are hosted at Github [1], using the "mantisbt" 
organization for all official code repositories.  I've also renamed the 
development tools repository from "mantisbt-dev" to "mantisbt-tools" for 
sake of clarity.  Commit emails will now be sent to the mantisbt-cvs 
list from no...@gi... rather than gi...@ma...

Regarding plugins, I've have created a second organization on Github 
called "mantisbt-plugins" [2].  Community members with plugins are 
welcome to join the organization and have their repositories hosted 
there as a sort of "official list" of available plugins.  Simply send a 
request to the developer list, and we will add your Github account and 
create a repository that you can push to.  Any plugins currently hosted 
on git.mantisforge.org will continue to be available, although we would 
encourage moving them to Github as time permits.

Ideally, this move will benefit both community and developer 
contribution in multiple ways:

- Github allows for easy "forking" to give users their own repository to 
develop changes in, and also provides a method to submit "pull requests" 
back to the development team or plugin authors.

- Github allows users to easily manage their account and SSH keys for 
all repositories, and has a much friendlier interface for doing so.

- Github provides a better repository viewing interface, and allows for 
superior integration with MantisBT itself via service hooks.

- A central plugin organization will allow core developers better access 
to orphaned or unmaintained community projects.

If you have any questions about Github or the process of moving plugin 
repositories, please send a message to the developer mailing list.

[1] http://github.com/mantisbt/
[2] http://github.com/mantisbt-plugins/

Cheers

-- 
John Reese
noswap.com

[mantisbt-announce] MantisBT 1.2.5 Released

[John R. <jo...@no...>]

Hi all,

MantisBT 1.2.5 is a maintenance update for the stable 1.2.x branch. It 
is recommended that all MantisBT users (including those still using 
1.1.x or earlier versions) upgrade to this latest release.

This release brings improved translations in many languages as well as 
numerous bug fixes across a range of MantisBT features.

A full changelog for 1.2.5 can be found on the official site:
    http://www.mantisbt.org/bugs/changelog_page.php?version_id=113

The release is available for download at:
    http://www.mantisbt.org/download.php

Cheers

-- 
John Reese
noswap.com

[mantisbt-announce] MantisBT 1.2.4 Released

[John R. <jr...@le...>]

Howdy all,

MantisBT 1.2.4 is a security update for the stable 1.2.x branch. All
installations that are currently running any 1.2.x version are advised to
upgrade to this release.

Gjoko Krstic of Zero Science Lab reported multiple vulnerabilities in the
admin/upgrade_unattended.php script. Issue #12607 provides more detail on the
vulnerabilities discovered. We thank Gjoko for his detailed assistance with
testing, patching and answering questions. Please note that the /admin/
directory should be removed from all MantisBT installations after the
installation or upgrade has been completed. This is particularly true for
MantisBT installations accessible over the Internet.

Also included with 1.2.4 are some bug fixes relating to fonts in the
MantisGraph plugin, SOAP API, CSV export, custom field values, relationship
graphs, fields on the manage user page, built-in time tracking and the
allow_reporter_close feature. This release includes updated translations for
many languages and improved installation documentation in doc/INSTALL.

A full changelog for the 1.2.x series can be found on the official site:
   http://www.mantisbt.org/bugs/changelog_page.php?version_id=112

The release is available for download at:
   http://www.mantisbt.org/download.php

Cheers
-- 
John Reese
LeetCode.net

[mantisbt-announce] MantisBT 1.2.3 Released

[John R. <jr...@le...>]

Howdy folks,

MantisBT 1.2.3 is a security update for the stable 1.2.x branch. All 
installations that are currently running any 1.2.x version are advised 
to upgrade to this release.

Issue #12312 covers an XSS vulnerability in the upstream NuSOAP library. 
The fix has been applied to the library included in MantisBT releases, 
and a patch has been submitted upstream for future releases of NuSOAP. 
See http://www.mantisbt.org/bugs/view.php?id=12312 for further details.

Also included with 1.2.3 are another round of XSS fixes to MantisBT, 
improved excel export, translation updates, and bug fixes to the SOAP 
API, installation, plugin system, and email notifications.

The release changelog can be found at:
  - http://www.mantisbt.org/bugs/changelog_page.php?version_id=111

It can be downloaded at:
  - http://www.mantisbt.org/download.php

Cheers

-- 
John Reese
LeetCode.net

[mantisbt-announce] MantisBT 1.2.2 Released

[John R. <jr...@le...>]

Howdy all,

MantisBT 1.2.2 is a security update for the stable 1.2.x branch. All 
installations that are currently running any 1.2.x version are advised 
to upgrade to this release.

Issue #11952 covers a security fix to the display of inline attachments, 
where "Arbitrary inline attachment rendering could lead to cross-domain 
scripting or other browser attacks".  See 
http://www.mantisbt.org/bugs/view.php?id=11952 for further details and 
information.

Also included with 1.2.2 are a range of translation updates, regression 
fixes, and bug fixes, including multiple SOAP API-related bugs and 
regressions.

The release changelog can be found at:
     - http://www.mantisbt.org/bugs/changelog_page.php?version_id=110

It can be downloaded at:
     - http://www.mantisbt.org/download.php

Cheers

-- 
John Reese
LeetCode.net

[mantisbt-announce] MantisBT 1.2.1 Released

[John R. <jr...@le...>]

Hi all,

MantisBT 1.2.1 is a maintenance update for the stable 1.2.x branch. All
installations that are currently running any 1.1.x or 1.2.0 version are
advised to upgrade to this release.

Included with 1.2.1 are a range of bug fixes, translation updates, and general
improvements over the initial 1.2.0 release.  Highlights include an improved
installation, a fixed upgrade path from 1.1.x, fixes to the URL and path
detection, and updates to the plugin event system.

The release changelog can be found at:
    - http://www.mantisbt.org/bugs/changelog_page.php?version_id=109

It can be downloaded at:
    - http://www.mantisbt.org/download.php

Cheers

-- 
John Reese
LeetCode.net

[mantisbt-announce] MantisBT 1.2.0 Released

[John R. <jr...@le...>]

MantisBT Release Notes

1.2.0 Stable Release
-------------------------------------------------

This release marks the first official release in the 1.2.x series of MantisBT.
1.2.0 is a major feature release for MantisBT, and includes many bugfixes and
enhancements over the 1.1.x stable branch.  All users of 1.1.x are highly
encouraged to upgrade as soon as possible.

A full changelog for the 1.2.x series can be found on the official site. [1]

There are many new features added to 1.2.0, including:

  - Converted the MantisBT Manual to Docbook format, and added a new Developer's
    Guide manual, both of which are compiled and included in every release

  - Implemented a plugin system with many plugins already released [2]

  - Global categories available to all projects, as well as project categories
    inheriting from parent projects to child projects;  both are optional

  - Tracked change history for textarea fields (Description, etc) and bug notes

  - Customizable sets of columns for View Issues page and export formats

  - Combined simple and advanced views into a single, configurable view that
    allows selecting exactly what fields to show or hide

  - Improved roadmap and changelog pages, including version release dates, and
    permalinks to individual versions

  - Marking versions as obsolete to hide them from the roadmap and changelog

  - More configuration options for rebranding MantisBT installations

  - Improved support for PostgreSQL databases

  - Improved support for UTF-8 localizations and content

  - Implemented custom search providers for Firefox and Internet Explorer

  - Implemented localized timestamps using according to user-preferred timezones


There have also been many improvements to the codebase beyond adding features:

  - Migrated to parameterised database queries throughout the codebase for both
    performance and security improvements

  - Added PHPDoc compatible documentation to all internal API's

  - Removed many hardcoded references to access levels and other enumerations,
    for improved customizability.

  - Migrated away from DATETIME fields to integer timestamps for timezone usage

  - All 3rd party code is now contained within the library/ path, including
    documentation on library versions and any patches applied

  - Initial support for MySQL 6 and PHP 5.3


[1] The changelog is split between multiple releases:

     1.2.0a1    http://www.mantisbt.org/bugs/changelog_page.php?version_id=89
     1.2.0a2    http://www.mantisbt.org/bugs/changelog_page.php?version_id=96
     1.2.0a3    http://www.mantisbt.org/bugs/changelog_page.php?version_id=104
     1.2.0rc1   http://www.mantisbt.org/bugs/changelog_page.php?version_id=98
     1.2.0rc2   http://www.mantisbt.org/bugs/changelog_page.php?version_id=106
     1.2.0      http://www.mantisbt.org/bugs/changelog_page.php?version_id=108

[2] MantisForge is now the preferred code collaboration site for MantisBT,
     including free hosting of MantisBT-related Git repositories for development
     of contributions to MantisBT itself or community plugins.

     http://git.mantisforge.org/

-- 
John Reese
LeetCode.net

[mantisbt-announce] MantisBT 1.2.0rc2 Release Candidate 2

[John R. <jr...@le...>]

MantisBT Release Notes

1.2.0 Release Candidate 2
-------------------------------------------------

This release marks the second "stable" release in the 1.2.x series of MantisBT.
The 1.2.x series is now officially feature complete, and this build is ready
for official testing in non-critical installations.  This release is a good
representation of a final 1.2.0 build.

A full changelog for the 1.2.x series can be found on the official site. [1]

There are many new features added to 1.2.x, including:

  - Converted the MantisBT Manual to Docbook format, and added a new Developer's
    Guide manual, both of which are compiled and included in every release.

  - Implemented a plugin system with many plugins already released [2]

  - Global categories available to all projects, as well as project categories
    inheriting from parent projects to child projects;  both are optional

  - Tracked change history for textarea fields (Description, etc) and bug notes

  - Customizable sets of columns for View Issues page and export formats

  - Combined simple and advanced views into a single, configurable view that
    allows selecting exactly what fields to show or hide

  - Improved roadmap and changelog pages, including version release dates, and
    permalinks to individual versions

  - Marking versions as obsolete to hide them from the roadmap and changelog

  - More configuration options for rebranding MantisBT installations

  - Improved support for PostgreSQL databases

  - Improved support for UTF-8 localizations and content

  - Implemented custom search providers for Firefox and Internet Explorer

  - Implemented localized timestamps using according to user-preferred timezones


There have also been many improvements to the codebase beyond adding features:

  - Migrated to parameterised database queries throughout the codebase for both
    performance and security improvements

  - Added PHPDoc compatible documentation to all internal API's

  - Removed many hardcoded references to access levels and other enumerations,
    for improved customizability.

  - Migrated away from DATETIME fields to integer timestamps for timezone usage

  - All 3rd party code is now contained within the library/ path, including
    documentation on library versions and any patches applied

  - Initial support for MySQL 6 and PHP 5.3


[1] The changelog is split between multiple releases:

     1.2.0a1    http://www.mantisbt.org/bugs/changelog_page.php?version_id=89
     1.2.0a2    http://www.mantisbt.org/bugs/changelog_page.php?version_id=96
     1.2.0a3    http://www.mantisbt.org/bugs/changelog_page.php?version_id=104
     1.2.0rc1   http://www.mantisbt.org/bugs/changelog_page.php?version_id=98
     1.2.0rc2   http://www.mantisbt.org/bugs/changelog_page.php?version_id=106

[2] MantisForge is now the preferred code collaboration site for MantisBT,
     including free hosting of MantisBT-related Git repositories for development
     of contributions to MantisBT itself or community plugins.

     http://git.mantisforge.org/

-- 
John Reese
LeetCode.net

[mantisbt-announce] MantisBT 1.2.0rc1 Release Candidate 1

[John R. <jr...@le...>]

MantisBT Release Notes

1.2.0 Release Candidate 1
-------------------------------------------------

This release marks the first "stable" release in the 1.2.x series of MantisBT.
The 1.2.x series is now officially feature complete, and this build is ready
for official testing in non-critical installations.  This release is a good
representation of a final 1.2.0 build.

A full changelog for the 1.2.x series can be found on the official site. [1]

There are many new features added to 1.2.x, including:

  - Converted the MantisBT Manual to Docbook format, and added a new Developer's
    Guide manual, both of which are compiled and included in every release.

  - Implemented a plugin system with many plugins already released [2]

  - Global categories available to all projects, as well as project categories
    inheriting from parent projects to child projects;  both are optional

  - Tracked change history for textarea fields (Description, etc) and bug notes

  - Customizable sets of columns for View Issues page and export formats

  - Improved roadmap and changelog pages, including version release dates, and
    permalinks to individual versions

  - Marking versions as obsolete to hide them from the roadmap and changelog

  - More configuration options for rebranding MantisBT installations

  - Improved support for PostgreSQL databases

  - Improved support for UTF-8 localizations and content

  - Implemented custom search providers for Firefox and Internet Explorer

  - Implemented localized timestamps using according to user-preferred timezones


There have also been many improvements to the codebase beyond adding features:

  - Migrated to parameterised database queries throughout the codebase for both
    performance and security improvements

  - Added PHPDoc compatible documentation to all internal API's

  - Removed many hardcoded references to access levels and other enumerations,
    for improved customizability.

  - Migrated away from DATETIME fields to integer timestamps for timezone usage

  - All 3rd party code is now contained within the library/ path, including
    documentation on library versions and any patches applied


As usual, downloads can be found on the download page:
     http://www.mantisbt.org/download.php


[1] The changelog is split between multiple releases:

     1.2.0a1    http://www.mantisbt.org/bugs/changelog_page.php?version_id=89
     1.2.0a2    http://www.mantisbt.org/bugs/changelog_page.php?version_id=96
     1.2.0a3    http://www.mantisbt.org/bugs/changelog_page.php?version_id=104
     1.2.0rc1   http://www.mantisbt.org/bugs/changelog_page.php?version_id=98

[2] MantisForge is now the preferred code collaboration site for MantisBT,
     including free hosting of MantisBT-related Git repositories for development
     of contributions to MantisBT itself or community plugins.

     http://git.mantisforge.org/

-- 
John Reese
LeetCode.net

[mantisbt-announce] MantisBT 1.1.8 Released

[John R. <jr...@le...>]

Howdy,

MantisBT 1.1.8 is a maintenance update for the stable 1.1.x
branch. All installations that are currently running any 1.1.x release
are advised to upgrade to this release.

This is the final release of the 1.1.x series, and fixes a few small 
bugs and translation issues.  A release candidate for 1.2.0 will be made 
available within the very near future, and development on the 1.1.x 
series will be halted as of now, barring any major issues before the 
final release of 1.2.0.

The release changelog can be found at:
   - http://www.mantisbt.org/bugs/changelog_page.php?version_id=105

It can be downloaded at:
   - http://www.mantisbt.org/download.php

Cheers

-- 
John Reese
LeetCode.net

[mantisbt-announce] MantisBT 1.1.6 Released

[John R. <jr...@le...>]

MantisBT version 1.1.6 is a maintenance update for the stable 1.1.x
branch.  All installations that are currently running any 1.1.x release
are advised to upgrade to this release.

This release fixes once and for all the caching troubles from previous
stable releases, some access permissions bugs, and a few various other
issues. This release also improves the existing source control
integration by allowing remote checkins.

Note: it is highly advised that users clear their browser and proxy
caches after upgrading to 1.1.6, in order to solve any problems stemming
from incorrect caching in older stable releases.

The release changelog can be found here:
    http://www.mantisbt.org/bugs/changelog_page.php?version_id=102

It can be found on our download page:
    http://www.mantisbt.org/download.php

Cheers

-- 
John Reese
LeetCode.net