Permalink
Switch branches/tags
release-2.14.0 release-2.13.2 release-2.13.1 release-2.13.0 release-2.12.2 release-2.12.1 release-2.12.0 release-2.11.1 release-2.11.0 release-2.10.1 release-2.10.0 release-2.9.1 release-2.9.0 release-2.8.1 release-2.8.0 release-2.7.1 release-2.7.0 release-2.6.0 release-2.5.2 release-2.5.1 release-2.5.0 release-2.4.2 release-2.4.1 release-2.4.0 release-2.3.3 release-2.3.2 release-2.3.1 release-2.3.0 release-2.2.4 release-2.2.3 release-2.2.2 release-2.2.1 release-2.2.0 release-2.1.3 release-2.1.2 release-2.1.1 release-2.1.0 release-2.0.1 release-2.0.0 release-2.0.0-rc.2 release-2.0.0-rc.1 release-2.0.0-beta.3 release-2.0.0-beta.2 release-2.0.0-beta.1 release-1.3.15 release-1.3.14 release-1.3.13 release-1.3.12 release-1.3.11 release-1.3.10 release-1.3.9 release-1.3.8 release-1.3.7 release-1.3.6 release-1.3.5 release-1.3.4 release-1.3.3 release-1.3.2 release-1.3.1 release-1.3.0 release-1.3.0-rc.2 release-1.3.0-rc.1 release-1.3.0-beta.3 release-1.3.0-beta.2 release-1.3.0-beta.1 release-1.2.20 release-1.2.19 release-1.2.18 release-1.2.17 release-1.2.16 release-1.2.15 release-1.2.14 release-1.2.13 release-1.2.12 release-1.2.11 release-1.2.10 release-1.2.9 release-1.2.8 release-1.2.7 release-1.2.6 release-1.2.5 release-1.2.4 release-1.2.3 release-1.2.2 release-1.2.1 release-1.2.0 release-1.2.0rc2 release-1.2.0rc1 release-1.2.0a3 release-1.2.0a2 release-1.2.0a1 release-1.1.9 release-1.1.8 release-1.1.7 release-1.1.6 release-1.1.5 release-1.1.4 release-1.1.3 release-1.1.2 release-1.1.1
Nothing to show
Commits on May 23, 2018
  1. Fix PHP 7.2 system warnings in SOAP API

    atrol committed May 22, 2018
    Fixes #24470
  2. Fix PHP 7.2 system warning when logging is set to 'page'

    atrol committed May 21, 2018
    Fixes #24470
  3. Correct access checks when storing filters

    atrol committed May 16, 2018
    Fixes #24437
Commits on May 21, 2018
Commits on May 17, 2018
Commits on May 15, 2018
  1. Create project version via REST API

    vboctor committed May 5, 2018
    - Create a command for adding a project version.
    - Update web UI to use command to add project versions
    - Update SOAP API to add a project version
    - Create a REST API to add a project version
    
    Fixes #24388
Commits on May 14, 2018
Commits on May 10, 2018
Commits on May 6, 2018
  1. Fix Class 'ClientException' not found in issue api

    atrol committed May 6, 2018
    Issue #24398
Commits on May 3, 2018
  1. Fix Class 'ClientException' not found in tag api

    atrol committed May 3, 2018
    Fixes #24398
Commits on May 2, 2018
  1. Don’t auto-set status when explicitly set by user

    vboctor committed Apr 25, 2018
    Fixes #24242
Commits on Apr 30, 2018
Commits on Apr 29, 2018
  1. Update version to `2.14.0`

    vboctor committed Apr 29, 2018
  2. Update credits

    vboctor committed Apr 29, 2018
Commits on Apr 28, 2018
  1. Support getting a single project in REST API

    vboctor committed Apr 21, 2018
    Fixes #24333
  2. Expose default handler for categories for managers

    vboctor committed Apr 23, 2018
    Fixes #24346
  3. Use user account reference for category handler

    vboctor committed Apr 21, 2018
    Fixes #24343
  4. Fix filter APIs

    vboctor committed Apr 21, 2018
    The filter API was broken by recent refactoring causing it to return invalid id, name, public, and extra _filter_id.
    This broke both REST and SOAP APIs.
    
    Fixes #24335, #24349
Commits on Apr 27, 2018
  1. Merge branch 'master-2.13'

    atrol committed Apr 27, 2018
  2. Correct attachment handling when adding notes

    atrol committed Apr 25, 2018
    Fixing a SYSTEM WARNING on PHP 7.2
    'count(): Parameter must be an array or an object that implements Countable'
    
    Fixes #24355
  3. Set default encoding to UTF-8

    atrol committed Apr 24, 2018
    Ensure that encoding is always set to UTF-8 independant from
    any PHP default or ini setting
    
    http://php.net/manual/en/ini.core.php#ini.default-charset
    
    Fixes #24353
  4. Correct priority check on Manage Plugins page

    atrol committed Apr 20, 2018
    Fixes #24336
Commits on Apr 25, 2018
  1. Merge branch 'master-2.13'

    dregad committed Apr 25, 2018
  2. Prevent cloning private issues by unauthorized users

    dregad committed Apr 25, 2018
    Using a crafted request on bug_report_page.php (modifying the 'm_id'
    parameter), any user with REPORTER access or above is able to view any
    private issue's details (summary, description, steps to reproduce,
    additional information) when cloning. By checking the 'Copy issue notes'
    and 'Copy attachments' checkboxes and completing the clone operation,
    this data also becomes public (except private notes).
    
    Credits to Mustafa Hasan (strukt) strukt93@gmail.com for the finding.
    
    @atrol noted that the same vulnerability also existed in bug_report.php,
    although in this case the information disclosure is limited to notes and
    attachments (issue data itself does not become accessible).
    
    Added an access level check, so that the operation now fails with an
    Access Denied error in both cases.
    
    Fixes #24221, CVE-2018-9839
    Prevent cloning private issues by unauthorized users
    
    Using a crafted request on bug_report_page.php (modifying the 'm_id'
    parameter), any user with REPORTER access or above is able to view any
    private issue's details (summary, description, steps to reproduce,
    additional information) when cloning. By checking the 'Copy issue notes'
    and 'Copy attachments' checkboxes and completing the clone operation,
    this data also becomes public (except private notes).
    
    Added an access level check, so that the operation now fails with an
    Access Denied error.
    
    Credits to Mustafa Hasan (strukt) strukt93@gmail.com for the finding.
    
    Fixes #24221
  3. Correct default value of my_view_boxes in Admin Guide

    atrol committed Apr 18, 2018
    Fixes #24326
  4. Remove unused function filter_exists

    atrol committed Apr 18, 2018
    No need to deprecate as the function didn't work.
    There is a call of function filter_cache_row that doesn't exist.
    
    Issue #24325
  5. Remove unused local variables

    atrol committed Apr 18, 2018
    Issue #24325
  6. PHPdoc fixes

    atrol committed Apr 18, 2018
    Issue #24325
Commits on Apr 23, 2018
  1. Remove soap folder check

    atrol committed Apr 16, 2018
    Fixes #24236
Commits on Apr 19, 2018