- MantisBT 2.18
  * Code Cleanup
  * Plugin Columns - Export CSV or Excel - PHP 7.2.7 - crash error 500
  * Changes to project_view_state and view_state to create only private projects
  * Missing fallback for "Open Sans" font
  * Error Creating Issue with new TAG
  * Performance enhancements of string processing
- MantisBT 2.17.2
  * CVE-2018-17783: XSS in manage_filter_edit_page.php
  * CVE-2018-17782: XSS in manage_filter_page.php

• Files Changed
• Browse Source

- MantisBT 2.17.1
  CVE-2018-16514: Reflected XSS in view_filters_page.php via core/filter_form_api.php
- MantisBT 2.17.0
  https://www.mantisbt.org/bugs/changelog_page.php?project=mantisbt&version=2.17.0
  This is a selection of improvements among many others:
  * better visibility of relationships
  * search for users in the administration
  * REST and SOAP API improvements

• Files Changed
• Browse Source

CVE-2018-14895

• Files Changed
• Browse Source

- MantisBT 2.16.0
  https://www.mantisbt.org/bugs/changelog_page.php?project=mantisbt&version=2.16.0
  * ui
    - Local copy of Open Sans font does not include Latin-ext characters 
    - Fonts are not rendered correctly in Windows clients
    - Font = Times News Roman after Upgrade from v2.7.0
  * upgrade
    - Improve handling of unserialize errors when upgrading
    - Error in upgrade process 1.2.17 --> 1.3.0
  * performance
    - Unneeded information in Change Log and Roadmap
    - Performance enhancement of config_get_global function
  * timeline
    - Missing display of events in Timeline if All Projects is selected
  * code cleanup

• Files Changed
• Browse Source

- MantisBT 2.15.0
- Removed unused adodb scripts
- Don't package several test-cases from sub-packages as well 
  as vendor/phpunit. As the mantisbt test-cases are not in the upstream package
  we don't run any checks.

• Files Changed
• Browse Source

- MantisBT 2.14.0
  https://www.mantisbt.org/bugs/changelog_page.php?version_id=316
- MantisBT 2.13.2
  https://www.mantisbt.org/bugs/changelog_page.php?version_id=319

CVE-2018-9839: Private issues accessible to unauthorized users using the "Clone" functionality

• Files Changed
• Browse Source

Update to MantisBT 2.13.1

• Files Changed
• Browse Source

- MantisBT 2.11.1
  * https://www.mantisbt.org/bugs/changelog_page.php?project=mantisbt&version=2.11.1
  * Bugfix: REST API doesn't work from UI for some users
  * Bugfix: Warning message on login page after new installation

• Files Changed
• Browse Source

- Removed vendor/adodb/adodb-php/server.php file which isn't required
  but leads into CVE-2018-6382 and bsc#1078308
- Require fileinfo extension
- MantisBT 2.11.0
  * https://www.mantisbt.org/bugs/changelog_page.php?project=mantisbt&version=2.11.0
  * Administration: 
    - Allow unprotecting protected users
    - Other fixes
  * REST API: 
    - Added handling of tags, users, relationships, monitoring,
      attachements, time-tracking
  * Reports:
    - Several improvements
  * Installation fixes
  * Further improvements and code-cleanups

• Files Changed
• Browse Source

MantisBT 2.10.1, a bugfix and security release

• Files Changed
• Browse Source

- Update to 2.10.0
  * https://www.mantisbt.org/bugs/changelog_page.php?project=mantisbt&version=2.10.0
  * REST API: Filter improvements
  * Fixes in time-tracking
  * Further fixes and refactorings

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Update to 2.9.0
  * https://www.mantisbt.org/bugs/changelog_page.php?project=mantisbt&version=2.9.0
  * fixes and refactorings
  * REST API ipmrovements

• Files Changed
• Browse Source

- update to 2.8.0
  * https://www.mantisbt.org/bugs/changelog_page.php?project=mantisbt&version=2.8.0
  * fixes
  * REST API: updates, on by default
  * DKIM support for E-Mail signing
- REST API requires php-soap
- MatisBT requires php 5.5.0+

• Files Changed
• Browse Source

2.7.0

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- MantisBT 2.6.0
REST API
  * projects doesn't return child projects (vboctor)
  * Notes returned by /issues REST API have incorrect timestamps (vboctor)
  * Support adding/deleting notes via REST API (vboctor)
  * Support issue id as part of the path for REST API (vboctor)
Attachments
  * Can't open image attachments in browser windows (dregad)
Bugtracker
  * AJAX calls with invalid endpoints fail with syntax error (dregad)
  * bug_actiongroup_page, on copy, & move, poject combo lists projects wich the user has no rights (cproensa)
  * Update GuzzleHttp from 6.2.3 to 6.3.0 (vboctor)
  * Sutomization
  * Custom fields badly filtered when multi-projects (cproensa)
  * Field is appearing in email notification but not used in UI. (joel)
E-Mail
Update disposable-email-checker to v3.0.1 using Composer (vboctor)
  * Update PHPMailer v5.2.23 to v5.2.24 (vboctor)
  * Removing "Report an issue" permission removes user from Monitoring filter dropdown (atrol)
  * Due date field not displayed correctly when editing ticket (community)
  * Unused code and unused CSS delivered for obsoleted functionality (atrol)
  * Unused CSS delivered (atrol)
Markdown
  * Update Parsedown 1.6.2 to 1.6.3 (vboctor)
Performance
  * Project cache is not efficient with navbar project selection. (cproensa)
  * Unused and inefficient code in function layout_print_sidebar (atrol)
Time Tracking
  * Enabling Time Tracking distorts View Issue Details page layout. (cproensa)
  * Issue history box is narrower than other boxes above it on View Issue page (cproensa)
  * Time Tracking "auto count" is giving the wrong elapsed time (dregad)
  * Time tracking report excludes issues with no category assigned (cproensa)
  * Unable to access time tracking reports (atrol)
UI
  * 'Manage Configuration' tab usually does not highlight (dregad)
  * "notify user" check should be moved outside the form (cproensa)
  * Calendar doesn't show the correct date the first time it opens (dregad)
  * Display of hardcoded string on view_user_page if e-mail address is empty (atrol)
  * Graph display is too faint and blurred (atrol)
  * print_manage_menu() does not highlight active plugin pages (dregad)
  * Questionable display of "Access Denied" on view_user_page (atrol)
  * Questionable order and functionality of top buttons on "View Issue" page (atrol)
  * The required fields are not explicitly visible when updating, resolving or closing an issue (community)
  * When specifiying top_buttons display, the button on update screen has no styling. (atrol)

• Files Changed
• Browse Source

- make mantis a versioned provides capability

• Files Changed
• Browse Source

MantisBT 2.5.2

• Files Changed
• Browse Source

fix

• Files Changed
• Browse Source