Mantis maakt gebruik van PHP en MySQL om gebruikers bugs, tweaks en feature requests te laten rapporteren met betrekking tot een applicatie, een website, een forum en andere soorten scripts. De ontwikkelaars kunnen vervolgens de opmerkingen en aanbevelingen op een overzichtelijke manier verwerken waarbij de gebruiker de bijgehouden voortgang kan bekijken. Tweakers.net maakt in de vorm van de devtrack al enige tijd gebruik van Mantis, zodat gebruikers ons ontwikkelteam ten alle tijden lastig kunnen vallen met bugs, errors en feature requests van de verschillende onderdelen op de frontpage.
Het Mantis-ontwikkelteam heeft enkele dagen geleden versie 1.1.4 uitgebracht die de ingetrokken vorige uitgave vervangt. Ten opzicht van versie 1.1.2 zijn er weer verschillende bugs geplet en de beveiliging verbeterd. De lijst met veranderingen ziet er als volgt uit:
Version 1.1.4:
We had to withdraw 1.1.3 because of a serious flaw affecting the bug_report* pages. This new release fixes that problem and a newly discovered security issue.Version 1.1.3:
- 0009704: [security] Remote Code Execution in manage_proj_page.php (giallu) - resolved.
- 0009691: [bugtracker] Failed to report issue.(Always APPLICATION ERROR #2800) (jreese) - resolved.
- 0009690: [other] Wrong parameter count for session_set_cookie_params() (jreese) - resolved.
- 0009693: [webpage] Generated HTML contains multiple hostnames when proxied (jreese) - resolved.
In this release we fixed a couple of nasty bugs sneaked into 1.1.2, where sending bugnotes email notifications would fail and browser caching was not functional. We also refined the implementation of form security tokens and closed a couple of security issues, an information disclosure (with no CVE) and a session hijacking (CVE-2008-3102).
- 0009321: [security] Users can get title and status of issues that they don't have access to. (vboctor) - resolved.
- 0009533: [security] Mantis should use secure sessions on https connections (jreese) - resolved.
- 0009286: [administration] stray "2" in manage_user_prune.php (vboctor) - resolved.
- 0009664: [authentication] Logout without unsetting session cookie (jreese) - resolved.
- 0009323: [bugtracker] Browser caching broken since 1.1.2 (jreese) - resolved.
- 0009470: [bugtracker] Tags filter not filling into text field when selecting from list using Internet Explorer (jreese) - resolved.
- 0009493: [custom fields] Removing custom fields from project causes application error 2800 (giallu) - resolved.
- 0009309: [email] Problems with e-mail notifications about bugnotes [PATCH] (giallu) - resolved.
- 0004678: [filters] Filter combos don't fill up on if switched to 'All Projects' - closed.
- 0009430: [graphs] bug_graph_bystatus shows heading by_category (thraxisp) - resolved.
- 0009431: [localization] no localization for usage of open, resolved, closed in bug_graph_bystatus.php (thraxisp) - resolved.
- 0008882: [other] Gravatar causes annoying security popups on IE when using Mantis over HTTPS/SSL (jreese) - resolved.
- 0009361: [other] php session fail created cause mantis app error. (jreese) - resolved.
- 0009560: [other] Wrong behaviour in Session API (session_save_path error message) (jreese) - resolved.
- 0009672: [other] Fixing form error by going back fails because of security token (jreese) - resolved.
- 0009343: [scripting] form security token prevents changing relationship while resolving bug (jreese) - resolved.
:strip_exif()/i/1214209135.png?f=thumbmedium)
:strip_exif()/u/39092/wolkje-avatar3.gif?f=community){kind=avatar}