[Koha-bugs] [Bug 14487] Warns from returns.pl during checkin

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Fri Jul 3 23:08:39 CEST 2015


http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14487

M. Tompsett <mtompset at hotmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|Signed Off                  |ASSIGNED
                 CC|                            |mtompset at hotmail.com

--- Comment #6 from M. Tompsett <mtompset at hotmail.com> ---
[Fri Jul 03 17:00:54.327367 2015] [cgi:error] [pid 2960] [client
192.168.45.37:62532] AH01215: [Fri Jul  3 17:00:54 2015] returns.pl: Use of
uninitialized value in hash element at /home/mtompset/kohaclone/circ/returns.pl
line 469., referer:
http://library-admin.debiankoha.ca/cgi-bin/koha/circ/returns.pl

This probably applies to more than just Debian Jessie.

[Fri Jul 03 17:00:54.334787 2015] [cgi:error] [pid 2960] [client
192.168.45.37:62532] AH01215: [Fri Jul  3 17:00:54 2015] returns.pl: CGI::param
called in list context from package main line 620, this can lead to
vulnerabilities. See the warning in "Fetching the value or values of a single
named parameter" at /usr/share/perl5/CGI.pm line 436., referer:
http://library-admin.debiankoha.ca/cgi-bin/koha/circ/returns.pl

This probably applies to only Debian Jessie context.

Moving this back to ASSIGNED, since I believe 469 should be fixed at least
based on the bug description given.

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list