Mantis 2.24.1
16 July 2020
Mantis version 2.24.1 is now available (security release).
Upgrading to Mantis 2.24.1
Mantis 2.24.1 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Mantis updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Mantis install to test the 2.24.1 upgrade prior to applying it live. Get started managing your Mantis installations with Installatron
What's New in Mantis 2.24.1
Security
- [security] APIs expose private attachments to users who has access to issue but not private notes
- [security] file_get_visible_attachments shows private files that should be invisible to the user
Changes
- [attachments] Attachments box is invisible when notes are private by default
- [attachments] Database Server error while adding file to project
- [administration] Impossible to reset user's password
- [documentation] Documentation for REST API /users/{id}/reset missing
- [api rest] Resetting password for protected user via REST API should fail
Bug Fixes
- [bugtracker] changed project order / sequence
- [bugtracker] OS build field not filled in viewing mode
- [bugtracker] View Issue page does not show "Product Build" (wrong key names in code)