MantisTouch 1.1.2 Released

For those not familiar with MantisTouch:

“MantisTouch was developed to provide mobility to MantisBT. As a web app, MantisTouch provides a mobile optimized user interface for iPhone, Android, and Windows Phone. MantisTouch uses web services to access the bugtracking data allowing it to be installed on the same or a different server than MantisBT.”

This released is focused on addressing some of the common issues found during deployment in some of the customer environments. These include the following:

1. ‘Invalid controller specified (error)’ is now fixed. Instead, MantisTouch will prompt the real issue that caused the need to look for the error controller :)

2. Improved README with some extra installation steps that were missing from the previous versions.

The most common deployment issues were:

1. Errors caused by MantisBT API on the MantisBT side – These are typically caused by PHP errors / warnings that show up in the API due to errors in config_inc.php, custom_strings_inc.php, etc. You can resolve these issues one by one as MantisTouch errors on them, or you can use the following settings in config_inc.php, to make MantisBT complain on such errors to fix existing ones and avoid having new ones get introduced due to future changes:

$g_display_errors = array(
E_WARNING => 'halt',
E_NOTICE => 'halt',
E_USER_ERROR => 'halt',
E_USER_WARNING => 'halt',
E_USER_NOTICE => 'halt'
);

$g_stop_on_errors = ON;
$g_show_detailed_errors = ON;

2. Errors when url re-writing is not enabled, causing Zend framework to fail routing of checkLogin – See Zend Framework guide for URL re-writing setup for IIS and Apache.

MantisTouch v1.x license owners can download this version for free via the same link issued on purchase.

Please report issues under the ‘MantisTouch’ project in the bugtracker, or provide feedback via the feedback buttons in MantisTouch itself.

Posted in MantisBT, MantisTouch | Leave a comment

MantisBT 1.2.10 Released

MantisBT 1.2.10 is a maintenance release. All installations that are currently running any 1.2.x version or older are advised to upgrade to this release.

A full changelog for 1.2.10 can be found at:
http://www.mantisbt.org/bugs/changelog_page.php?version_id=146

The release can be downloaded at:
http://www.mantisbt.org/download.php

Checkout Hosted MantisBT to be up and running in minutes.  For optimized access to MantisBT from iPhone, Android and Windows Phone checkout MantisTouch.

Posted in Uncategorized | 1 Comment

MantisTouch launched new website

I’ve been busy lately with the MantisTouch v1.1.1 release as well as working on MantisTouch new website.  I’m glad the release is out and the new website is now online at mantistouch.org.  Re-designing the MantisBT website is next on my todo list.

I encourage users to checkout MantisTouch and it’s new website.  The new website have all the social buttons available to like it, tweet about it, +1, etc.

It is recommended to use MantisTouch with MantisBT v1.2.9 that the MantisBT team has released recently.

Posted in MantisBT, MantisTouch | Leave a comment

MantisTouch v1.1.1 Released

First off, I would like to start by thanking MantisTouch users for their positive feedback.  The v1.1.1 release has several improvements that addressed issues and feature requests that were reported so far.  The detailed change log can be found here, with the following highlights:

  1. Fix timezone translation issues, this includes a fix in both MantisTouch and MantisBT.  Hence, the proper behavior will happen when using v1.1.1 with v1.2.9.
  2. Improvements to README file to make requirements explicit and provide more detailed steps.
  3. Provide a friendly error message when the target MantisBT instance doesn’t run MantisBT v1.2.5 or above.  However, it is highly recommended to use MantisBT v1.2.9.
  4. Use the new MantisBT logo.
See MantisTouch website for more details about the product or to get your own instance which provides a mobile friendly user interface for iPhone, Android and Windows Phone.
Posted in MantisBT, MantisTouch | 1 Comment

MantisBT 1.2.9 Released

MantisBT Logo

MantisBT 1.2.9

MantisBT 1.2.9 release delivers 92 fixes and improvements including security fixes, new MantisBT logo, MantisTouch integration, MS SQL fixes, SOAP API improvements, and others.  We recommend that all instances be upgraded to this release.

A full changelog for 1.2.9 can be found at:
http://www.mantisbt.org/bugs/changelog_page.php?version_id=140

The release can be downloaded at:
http://www.mantisbt.org/download.php

Checkout Hosted MantisBT to be up and running in minutes.  For optimized access to MantisBT from iPhone, Android and Windows Phone checkout MantisTouch.

Posted in MantisBT, MantisTouch | 8 Comments

MantisTouch delivers MantisBT for iPhone, Android and Windows Phone

Several years ago, we’ve provided a MantisBT phone optimized interface using MantisWAP, since then the smart phone market has changed significantly.  The smart phones are much more capable, more users have them and expectation is that all services have phone optimized apps.  This has triggered the development of a more modern and frictionless solution via MantisTouch which you can access here.

MantisTouch is an HTML 5 client that is optimized for the phone screen size and the touch interaction model.  Unlike MantisWAP, MantisTouch usage doesn’t require updating the MantisBT installation or even involvement of the MantisBT administrator to enable access for MantisTouch.  MantisTouch acts as a proxy that provides access to MantisBT 1.2.x instance via utilizing SOAP API.

The choice to go with the HTML 5 approach provides a universal experience across multiple phone platforms including iPhone, Android and Windows Phone.

Users are encouraged to provide feedback using the MantisBT official bug tracker under the MantisTouch project.  You can also provide feedback using the “Send Feedback” MantisTouch feature.  It would help if you always provide the MantisTouch version, MantisBT version, Phone type, along with the feedback.  When applicable, also attach screenshots.  The version numbers are available on the MantisTouch about page for your convenience.

Looking forward for your feedback and hoping that MantisTouch will be a game changer when it comes to access of MantisBT on the go.

Posted in MantisBT, MantisTouch | 4 Comments

MantisBT 1.2.8 Released

Hi all,

MantisBT 1.2.8 is a security update for the stable 1.2.x branch. All installations that are currently running any 1.2.x version are advised to upgrade to this release.

Paulino Calderon from Websec, High-Tech Bridge Security Research Lab and Paul Richards discovered 3 vulnerabilities:
– 1x local file inclusion (LFI)/directory traversal
– 2x cross site scriptin (XSS)

These vulnerabilities could have very severe consequences for users of MantisBT, particularly as a result of the local file inclusion vulnerability. If an attacker can upload their own PHP script to the server as an attachment, they may be able to execute this script using the LFI vulnerability.

Refer to issues #13191 and #13281 for detailed information:

http://www.mantisbt.org/bugs/view.php?id=13191
http://www.mantisbt.org/bugs/view.php?id=13281

A full changelog for 1.2.8 can be found at:

http://www.mantisbt.org/bugs/changelog_page.php?version_id=139

The release can be downloaded at:

http://www.mantisbt.org/download.php

Cheers

Posted in MantisBT | Tagged , | 3 Comments

MantisBT 1.2.7 Released

Howdy all,

MantisBT 1.2.7 is a security update for the stable 1.2.x branch. All installations that are currently running any 1.2.x version are advised to upgrade to this release.

Net.Edit0r from BlACK Hat Group posted a vulnerability report for an XSS issue in search.php. All MantisBT users (including anonymous users that are not logged in to public bug trackers) could be impacted by this vulnerability. Refer to issue #13245 for full details.

This release also contains numerous minor bug fixes to MantisBT and improved translations in many languages.

A full changelog for 1.2.7 can be found on the official site:
http://www.mantisbt.org/bugs/changelog_page.php?version_id=138

The release can be downloaded from:
http://www.mantisbt.org/download.php

Cheers

Posted in MantisBT | Tagged , | 4 Comments

MantisBT 1.2.6 Released

Hi all,

MantisBT 1.2.6 is a maintenance update for the stable 1.2.x branch. It is recommended that all MantisBT users (including those still using 1.1.x or earlier versions) upgrade to this latest release.

This release brings bug fixes and improvements across a range of MantisBT features, especially the SOAP API, authentication, time tracking, and billing areas. Documentation and translation updates are also included.

A full changelog for 1.2.6 can be found on the official site:
http://www.mantisbt.org/bugs/changelog_page.php?version_id=114

The release is available for download at:
http://www.mantisbt.org/download.php

Cheers

Posted in MantisBT | Tagged , | 1 Comment

MantisBT Moving to Github

Hi all,

I’d like to announce that as of now, the primary Git repositories for the MantisBT project are hosted at Github [1], using the “mantisbt” organization for all official code repositories. I’ve also renamed the development tools repository from “mantisbt-dev” to “mantisbt-tools” for sake of clarity. Commit emails will now be sent to the mantisbt-cvs list from noreply@github.com rather than git@mantisbt.org

Regarding plugins, I’ve have created a second organization on Github called “mantisbt-plugins” [2]. Community members with plugins are welcome to join the organization and have their repositories hosted there as a sort of “official list” of available plugins. Simply send a request to the developer list, and we will add your Github account and create a repository that you can push to. Any plugins currently hosted on git.mantisforge.org will continue to be available, although we would encourage moving them to Github as time permits.

Ideally, this move will benefit both community and developer contribution in multiple ways:

  • Github allows for easy “forking” to give users their own repository to develop changes in, and also provides a method to submit “pull requests” back to the development team or plugin authors.
  • Github allows users to easily manage their account and SSH keys for all repositories, and has a much friendlier interface for doing so.
  • Github provides a better repository viewing interface, and allows for superior integration with MantisBT itself via service hooks.
  • A central plugin organization will allow core developers better access to orphaned or unmaintained community projects.

If you have any questions about Github or the process of moving plugin repositories, please send a message to the developer mailing list.

[1] http://github.com/mantisbt/
[2] http://github.com/mantisbt-plugins/

Cheers

Posted in MantisBT | Tagged | 7 Comments