- MantisBT 2.2.4:
* CVE-2017-7615: Account verification page allows resetting any
user's password (bsc#1034333)
- includes changes from 2.2.3:
* Sorting all bugs list using a column header after applying a
filter resets the filter
* Permalink does not work with "Note By"
* Filter error due to "view status" having an array value
* Regression in custom field sorting
* CVE-2017-7309: XSS in adm_config_report.php (bsc#1031807)
* CVE-2017-7241: XSS in move_attachments_page.php (bsc#1031807)
* Markdown starts heading in the middle of a line
* Markdown still converting '& amp;' to & and '& lt;' to <
- includes changes from 2.2.2:
* CVE-2017-6973: XSS in adm_config_report.php (bsc#1031807)