Created attachment 460660 [details] emerge --info dev-php/adodb-5.20.9 itself builds fine. strange: the name of the downloaded file is $DISTDIR/v5.20.9.tar.gz After installation the login screen of mantisbt states that there in an error #0 while executing 'SET NAMES UTF8'. I've already re-started apache. I've also tested the database using the mysql client and a tiny php script on the command line. So, the database itself works fine. Meanwhile, I rolled back to dev-php/adodb-5.18, which still works. I know, mantisbt is not in the gentoo tree anymore. Just for others to know about the problem. BTW: What successor do you suggest? Is there a way to migrate our bugs to another system?
There are newer versions of mantis available... v1.3.5 is probably easier to upgrade to, but v2.0 is now out as well. If you want to install them through portage, you'll have to update the ebuild and I'm not sure how hard that will be. Mantis bundles its own copy of adodb and a few other libraries. Did the ebuild unbundle them? If it did, then the older version of mantis probably just doesn't work with the newer adodb and you'll be forced to upgrade. If it didn't, you may be able to trick mantis into using the (old, vulnerable...) bundled copy by messing with the PHP include path. In mantis-1.3.5, they've bundled adodb-5.20.9, so your best bet would be to upgrade to that because you know it will work with the system adodb. It looks like mantis also bundles PHPMailer which recently had some security problems but is still in the Gentoo tree. If at all possible, I would try to update the ebuild and keep those libraries unbundled so that you keep receiving security updates for them.
There's not much I can do about this on the dev-php/adodb end. The new adodb fixes a few security issues, and that's why the old versions were removed (and we can't bring them back). If you absolutely must keep using the old version of mantisbt, then you'll have to keep a copy of the old adodb around, too. I would hope an upgrade to mantisbt-1.3.5 isn't too hard though.
