- Update to 1.2.15. PR: ports/179295 Submitted by: Torsten Zuhlsdorff <foo@meisterderspiele.de> Approved by: maintainer timeoutc7f8a8bbd2
mantis -- multiple vulnerabilitiesentered 2024-01-06
Bug tracking system written in PHP
mantisbt:mantisbt from the port| CVE-2026-30849 | 9.3 | 2026-03-23 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions prior to 2.28.1 running on MySQL family databases are affected by an authentication bypass vulner… |
| CVE-2025-47776 | 8.8 | 2025-11-04 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Due to incorrect use of loose (==) instead of strict (===) comparison in the authentication code in versio… |
| CVE-2024-23830 | 8.3 | 2024-02-20 | MantisBT is an open source issue tracker. Prior to version 2.26.1, an unauthenticated attacker who knows a user's email address and username can hijack the user's accoun… |
| CVE-2024-34077 | 7.3 | 2024-05-14 | MantisBT (Mantis Bug Tracker) is an open source issue tracker. Insufficient access control in the registration and password reset process allows an attacker to reset ano… |
| CVE-2024-34081 | 6.6 | 2024-05-14 | MantisBT (Mantis Bug Tracker) is an open source issue tracker. Improper escaping of a custom field's name allows an attacker to inject HTML and, if CSP settings permit,… |
| CVE-2025-46556 | 6.5 | 2025-11-04 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.27.1 and below allow attackers to permanently corrupt issue activity logs by submitting extreme… |
| CVE-2025-55155 | 5.4 | 2025-11-04 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to change their e-mail address, the system s… |
| CVE-2025-62520 | 5.3 | 2025-11-04 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, due to insufficient access-level checks, any non-admin user with access to m… |
| CVE-2024-45792 | 5.3 | 2024-09-30 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Using a crafted POST request, an unprivileged, registered user is able to retrieve information about other… |
| CVE-2024-34080 | 5.3 | 2024-05-14 | MantisBT (Mantis Bug Tracker) is an open source issue tracker. If an issue references a note that belongs to another issue that the user doesn't have access to, then it … |
pkg audit reports nothing for this version.- Update to 1.2.15. PR: ports/179295 Submitted by: Torsten Zuhlsdorff <foo@meisterderspiele.de> Approved by: maintainer timeoutc7f8a8bbd2
- Update to 1.2.14 PR: ports/171917 Submitted by: Dan Langille <dan@langille.org> (maintainer)ae5ae4b994
Update to 1.2.11. PR: ports/168983 Submitted by: Dan Langille <dan@langille.org> (maintainer) Security: 55587adb-b49d-11e1-8df1-0004aca374af38eddf1bdb
- Update to 1.2.7 PR: ports/160368 Submitted by: gjb Approved by: dvl (maintainer), bapt (mentor) Security: CVE-2011-2938d853d81edd
-Update to 1.2.5 -MantisBT 1.2.5 is a maintenance update for the stable 1.2.x branch. It is recommended that all MantisBT users (including those still using 1.1.x or earlier versions) upgrade to this latest release. -This release brings improved translations in many languages as well as numerous bug fixes across a range of MantisBT features. -A full changelog for 1.2.5 can be found on the official site: http://www.mantisbt.org/bugs/changelog_page.php?version_id=113 PR: ports/156763 Submitted by: Rob Farmer <rfarmer@predatorlabs.net> (maintainer) Approved by: itetcu (mentor)(implicit)72508b5b7b
- Update to 1.2.4 PR: 154047 Submitted by: Marek Holienka <marekholienka@gmail.com> Approved by: maintainer Feature safe: yes9ba08ce40c
- Add missing PHP dependency: hash & session - Bump PORTREVISION - While I'm here, remove outdated no-op pre-everything:: PR: ports/151267 Submitted by: Frederic Praca <frederic.praca@freebsd-fr.org> Approved by: Dan Langille <dan@langille.org> (maintainer), pgollucci (mentor, implicit)0a83a99405
- Update to 1.2.3 PR: ports/150580 Submitted by: Dan Langille <dan@langille.org> (maintainer)997ff03ecb
- Update to 1.2.0 PR: ports/145281 Submitted by: Wen Heping (myself) Approved by: mainatainerc1a449a4ea
- Switch SourceForge ports to the new File Release System: categories starting with D075acacd24
- Update to 1.1.8 PR: 135887 Submitted by: Hung-Yi Chen <gaod@hychen.org> Approved by: maintainer via irc5b19a6d793
- Update to 1.1.6 PR: 129562 Submitted by: Dan Langille <dan@langille.org> (maintainer)12908c52ee
- Update to 1.1.5 PR: 129437 Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> Approved by: maintainer Security: http://www.vuxml.org/freebsd/29255141-c3df-11dd-a721-0030843d3802.html http://www.vuxml.org/freebsd/00d6040a-b8e0-11dd-a578-0030843d3802.html1f5c230b64
- Update to 1.1.4 PR: 128938 Submitted by: artem.sidorenko@t-online.de (Artem Sidorenko) Approved by: maintainer via irc056d9d6ef9
[MAINTAINER-UPDATE] databases/mantis upgrade to latest version PR: ports/126871 Submitted by: Dan Langille <dan@langille.org>8b97cd0df3
- bump PORTREVISION. - Use SF macro. - Add missing dependency. PR: ports/121819 Submitted by: "Mark D. Foster" <mark@foster.cc> Approved by: araujo (mentor), Dan Langille <dan@langille.org> (maintainer)6b3848c201
- Update to 1.1.1 PR: 119932 Submitted by: Thomas Sandford <freebsduser@paradisegreen.co.uk> Approved by: maintainer (via irc)d731481721
- Update to 1.1.0 PR: 119528 Submitted by: Thomas Sandford <freebsduser@paradisegreen.co.uk> Approved by: maintainer86b9ab4cd8
- Allow Apache 2.0+ PR: ports/114485 Submitted by: Sture Ahlin <sture.ahlin@telia.com> Approved by: Dan Langille <dan@langille.org> (maintainer)0e5c7267fd
Fix typo. Submitted by: sat@7c3b770b3b
- Update to 1.0.7 [1] - depreciate own hackish MANTISDIR in favor od WWWDIR [2] PR: ports/113780 Submitted by: Nils Vogels [1], itetcu@ (me) [2] Approved by: Dan Langille [1], [2] (on IRC)a69b5082a3
- Update to 1.0.6 PR: ports/106263 Submitted by: TAKAHASHI Kaoru <kaoru@kaisei.org> Approved by: maintainerdefbc6da4d
- Update to 1.0.5 PR: ports/101382 Submitted by: Kian Mohageri <kian.mohageri(at)gmail.com> Approved by: krion (mentor), maintainer3161ba348e
- Update to 1.0.3 PR: ports/98358 Submitted by: Dan Langille <dan@langille.org> (maintainer)33216e375b
- Pass maintainership to Dan Langille - Update pkg-descr PR: ports/95201 Submitted by: Dan Langille <dan@langille.org> Suggested by: gioria (maintainer)c8e7bdc6df
[resurrect port] databases/mantis
I've been using mantis for some time, but didn't know it
was in the tree. I did some research and found that the
bugs reported have been fixed.
See my post to the vuxml list for details:
http://docs.freebsd.org/cgi/mid.cgi?442DB5D7.30037.301FFEF
One major change to the Makefile: do not overwrite the
existing config_inc.php
PR: ports/95189
Submitted by: Dan Langille <dan@langille.org>7c19b4ecfcRemove databases/mantis, it has been marked FORBIDDEN for more than 3 months. Hat: portmgrabd81f8dcc
SHA256ify (manually done and checked) Approved by: krion@44855e0b04
Mark FORBIDDEN due to remote file inclusion vulnerability (IE. effectively execute arbitrary PHP code). Security: http://vuxml.FreeBSD.org/82a41084-6ce7-11da-b90c-000e0c2e438a.html Requested by: remko With hat: secteam965416509e
- Update to 1.0.0a2 PR: ports/81145 Submitted by: John Oxley <john@yoafrica.com> Approved by: maintainer timeout (14 days)ef1661457b
- Update to 0.18.2 PR: ports/64653 Submitted by: gioria (maintainer)b1fb147b0f
Update to 0.18.0 and fix problems with pkg-message and pkg-plist. This includes about 18 months' worth of changes, which are extensive. See ChangeLog. But, note that the new distfile has been switched over to DOS linebreaks, so the diffs are incredibly painful to read. I really wish authors would not do this. PR: ports/61368 Submitted by: Nils Vogels <nivo@yuckfou.org> Approved by: gioria@FreeBSD.org (maintainer)dc286c14c9
replace dependency on apache with USE_APACHEec56618aab
new ports: databases/mantis Mantis is a web-based bugtracking system. It is written in the PHP scripting language and requires the MySQL database and a webserver. Mantis has been installed on Windows, MacOS, OS/2, and a variety of Unix operating systems. Any web browser should be able to function as a client. It is released under the terms of the GNU General Public License (GPL). PR: ports/46034 Submitted by: Sebastien Gioria <gioria@FreeBSD.ORG>f68fdc7175