MantisBT

mantisbt - Change Log

mantisbt - 1.2.13 (Released 2013-01-21) View Issues ]
=======================================

MantisBT 1.2.13 had to be withdrawn shortly after release, as it introduced a bug
(#15411) causing the View Issues page to consume significantly more memory for
instances with large numbers of users (order 10k+), leading to system crashes,
as well as an XSS issue (#15415) in the Configuration Report page.

We recommend not to use 1.2.13, and deploy version 1.2.14 instead.

- 0003693: [bugtracker] Make the username in Manage Projects a clickable link to edit that user (dregad) - closed.
- 0007586: [customization] generic configuration editor cannot 'EDIT' an option (dregad) - closed.
- 0010130: [filters] Filter "Assigned to" does not display usernames when project "All Projects" is selected (dregad) - closed.
- 0011854: [documentation] Parameter $g_default_timezone" is not mentioned in administration_guide (dregad) - closed.
- 0013298: [preferences] commas and multi-dimensional arrays in adm_config_set (dregad) - closed.
- 0013680: [performance] Configuration page takes a very long time to load (dregad) - closed.
- 0014009: [administration] admin/check.php fatal error on PHP 5.1.x (undefined function timezone_identifiers_list()) (dregad) - closed.
- 0014559: [administration] Adding filter for "Configuration report" (dregad) - closed.
- 0015199: [other] Update json api error format (rombert) - closed.
- 0015201: [db postgresql] Summary page fail (dregad) - closed.
- 0015384: [security] CVE-2013-1810 XSS vulnerability on summary page (dhx) - closed.
- 0015247: [administration] Protected account change still sends email (dregad) - closed.
- 0015248: [email] The order of sending emails is inverted when using cron (dregad) - closed.
- 0015255: [bugtracker] Date filter fields are disabled when $g_use_javascript = OFF (dregad) - closed.
- 0015257: [filters] Inconsistent use of numeric vs text month in date filter selection fields (dregad) - closed.
- 0015258: [security] CVE-2013-1811 Reporter can change issue status to 'new' (dregad) - closed.
- 0015260: [bugtracker] access_get_status_threshold() returns incorrect value for NEW (dregad) - closed.
- 0015264: [custom fields] custom_field_get_id_from_name() broken since 1.2.12 (dregad) - closed.
- 0015265: [custom fields] custom_field_get_id_from_name() doesn't cache result of obsolete custom field names (dregad) - closed.
- 0015280: [code cleanup] Form in manage_columns_inc.php has misleading name and unnecessary multipart encoding (dregad) - closed.
- 0015320: [filters] Date filters broken since 1.2.12 (rombert) - closed.
- 0015360: [bugtracker] Add Missing config 'reminder_receive_threshold' in workflow threshold page (dregad) - closed.
- 0015370: [bugtracker] When a bug is resolved on report, default the handler to the current user (rombert) - closed.
- 0015373: [security] CVE-2013-0197 XSS vulnerability with match_type filter (dhx) - closed.
- 0015382: [email] Additional improvements to email logging (dregad) - closed.
- 0015388: [filters] Update the match_type parameter to be XSS-safe by itself (dregad) - closed.
- 0015389: [filters] Display of match_type filter property for unknown types (dregad) - closed.
- 0014157: [api soap] Array to string conversion error on soap request with PHP 5.4 (rombert) - closed.
- 0012128: [administration] Configuration Report should be sortable (atrol) - closed.
- 0014871: [api soap] Add support for the built-in soap extension in addition to nusoap (rombert) - closed.
- 0015356: [api soap] improve error handling in mc_issue_api.php (rombert) - closed.
- 0014672: [api soap] Slow performance of SOAP calls due to nusuoap (rombert) - closed.
- 0015222: [api soap] mc_project_delete_category fails to delete category (rombert) - closed.

[33 issues]


MantisBT 1.2.17 [^]
Copyright © 2000 - 2014 MantisBT Team
Time: 0.0992 seconds.
memory usage: 3,266 KB
Powered by Mantis Bugtracker