Bug 270050 - databases/mantis: Update to 2.25.6
Summary: databases/mantis: Update to 2.25.6
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Many People
Assignee: Fernando Apesteguía
URL: https://mantisbt.org/bugs/changelog_p...
Keywords: security
Depends on:
Blocks:
 
Reported: 2023-03-08 21:53 UTC by Zoltan ALEXANDERSON BESSE
Modified: 2023-03-10 11:13 UTC (History)
1 user (show)

See Also:

Attachments
update to 2.25.6 (1.20 KB, patch)
2023-03-08 21:53 UTC, Zoltan ALEXANDERSON BESSE 		zab: maintainer-approval+
Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Zoltan ALEXANDERSON BESSE 2023-03-08 21:53:55 UTC 
Created attachment 240680 [details]
update to 2.25.6

Update databases/mantis to version 2.25.6.
(This is a security and maintenance release.)

CHECK/QA:
- update: from 2.25.5 (postgres+php80) to 2.25.6 (postgres+php81):
core functions seem OK, no changes seen in user flows
- DB schema: unchanged
- new install: core functions work well
- poudriere: OK (12.4R, 13.1R, 14C; with/without my,pg,plugins in all combinations)
- portlint: no new WARNs/ERRs

VuXML entry in a separate PR: #270039
Comment 1 Fernando Apesteguía freebsd_committer freebsd_triage 2023-03-10 11:13:40 UTC 
Committed,

Thanks!
Comment 2 commit-hook freebsd_committer freebsd_triage 2023-03-10 11:13:41 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=6a6e6e8e04429742707b45637e1bfbfc3efe9928

commit 6a6e6e8e04429742707b45637e1bfbfc3efe9928
Author:     Zoltan ALEXANDERSON BESSE <zab@zltech.eu>
AuthorDate: 2023-03-09 07:51:42 +0000
Commit:     Fernando Apesteguía <fernape@FreeBSD.org>
CommitDate: 2023-03-10 11:09:08 +0000

    databases/mantis: Update to 2.25.6

    ChangeLog:
    https://mantisbt.org/bugs/changelog_page.php?project=mantisbt&version=2.25.6

    Fixes two CVEs.

    PR:             270050
    Reported by:    zab@zltech.eu (maintainer)
    Security:       CVE-2023-22476 CVE-2022-31129

 databases/mantis/Makefile | 2 +-
 databases/mantis/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)