February 2010 - Koha-bugs - lists.koha-community.org

[Bug 3449] New: Filtering tags by valid borrowernumber incorrectly displays error message
by bugzilla-daemon＠liblime.com 16 Feb '10

16 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3449 Summary: Filtering tags by valid borrowernumber incorrectly displays error message Product: Koha Version: HEAD Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Tools AssignedTo: galen.charlton(a)liblime.com ReportedBy: oleonard(a)myacpl.org Estimated Hours: 0.0 Change sponsored?: --- As originally reported as part of Bug 2693, if you use the "filter" form on the tags review page to filter on a valid borrowernumber the page will display an error message even as it returns results: "ERROR: No match for user (51). FILTER REQUIRES BORROWERNUMBER (not name)." -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

2 5

[Bug 3654] New: Authorized Values Page Edits
by bugzilla-daemon＠kohaorg.ec2.liblime.com 16 Feb '10

16 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3654 Summary: Authorized Values Page Edits Product: Koha Version: HEAD Platform: PC OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: System Administration AssignedTo: nengard(a)gmail.com ReportedBy: nengard(a)gmail.com Estimated Hours: 0.0 Change sponsored?: --- The Authorized Values page says that's it's just for cataloging - but Authorized Values are used for more than that now - so this page needs some text editing. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 7

[Bug 2959] Enhancements for link checker
by bugzilla-daemon＠kohaorg.ec2.liblime.com 16 Feb '10

16 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=2959 --- Comment #8 from Galen Charlton <gmcharlt(a)gmail.com> 2010-02-16 11:49:17 --- Pushed timeout patch to HEAD for inclusion in 3.2. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0

[Bug 3090] Minor usability problems with runreport.pl
by bugzilla-daemon＠kohaorg.ec2.liblime.com 16 Feb '10

16 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3090 Galen Charlton <gmcharlt(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #5 from Galen Charlton <gmcharlt(a)gmail.com> 2010-02-16 11:41:24 --- Pushed follow-up patch by Garry. Closing -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0

[Bug 4193] New: Authentication with cardnumber/password at intranet allows superlibrarian access
by bugzilla-daemon＠kohaorg.ec2.liblime.com 16 Feb '10

16 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4193 Summary: Authentication with cardnumber/password at intranet allows superlibrarian access Product: Koha Version: rel_3_0 Platform: PC OS/Version: All Status: NEW Severity: critical Priority: PATCH-Sent Component: Authentication AssignedTo: henridamien(a)koha-fr.org ReportedBy: henridamien(a)koha-fr.org Estimated Hours: 0.0 Change sponsored?: --- Created an attachment (id=1630) --> (http://bugs.koha.org/cgi-bin/bugzilla3/attachment.cgi?id=1630) patch proposed When an unpriviledged user is login in at intranet with his cardnumber/password, he gains superlibrarian access. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 1

[Bug 4082] New: OPAC Normal View for Books with Multiple Items/Holdings Not Showing All Items
by bugzilla-daemon＠kohaorg.ec2.liblime.com 16 Feb '10

16 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4082 Summary: OPAC Normal View for Books with Multiple Items/Holdings Not Showing All Items Product: Koha Version: rel_3_0 Platform: PC OS/Version: Windows 2000 Status: NEW Severity: major Priority: P4 Component: OPAC AssignedTo: jmf(a)liblime.com ReportedBy: herolsen(a)alumni.upenn.edu Estimated Hours: 0.0 Change sponsored?: --- Created an attachment (id=1502) --> (http://bugs.koha.org/cgi-bin/bugzilla3/attachment.cgi?id=1502) Screenshot Showing Multiple Items Issue Please see attached screenshot. Basically when a single MARC record with multiple holdings (items) is displayed in the end-user OPAC screen, only the first item is shown. The remaining items have what appear to be garbled place-holders. I searched through the Bugzilla entries, but could not find the issue entered previously. However, I did find mention of it elsewhere on the web (but, alas, no solution or replies that I could find): http://lists.katipo.co.nz/public/koha/2009-November/021106.html Thanks. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 3

[Bug 3652] New: XSS vulnerabilities
by bugzilla-daemon＠kohaorg.ec2.liblime.com 16 Feb '10

16 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3652 Summary: XSS vulnerabilities Product: Koha Version: rel_3_2 Platform: All OS/Version: All Status: NEW Severity: critical Priority: P5 Component: Templates AssignedTo: mjr(a)ttllp.co.uk ReportedBy: mjr(a)ttllp.co.uk Estimated Hours: 0.0 Change sponsored?: --- Koha has several XSS attack opportunities. There are two approaches to fixing this: 1. identify and ESCAPE="HTML" (or URL or JS) all places in the templates which are vulnerable; 2. set default_escape => "HTML" in C4::Output and identify the places in the templates which require ESCAPE="0" (unescaped) output. 1 (default permit) seems less secure than 2. 2 will break some things in the short term. This seems like a generalisation of bug #2690. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 2

[Bug 2505] enable Perl warnings in all modules and scripts
by bugzilla-daemon＠kohaorg.ec2.liblime.com 15 Feb '10

15 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=2505 --- Comment #26 from Garry Collum <gcollum(a)gmail.com> 2010-02-15 22:12:13 --- Created an attachment (id=1626) --> (http://bugs.koha.org/cgi-bin/bugzilla3/attachment.cgi?id=1626) Patch for opac-autoritiesdetail.pl and opac-MARCdetail.pl -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0

[Bug 4189] New: Searching z39.50 without selecting any servers results in error message
by bugzilla-daemon＠kohaorg.ec2.liblime.com 15 Feb '10

15 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4189 Summary: Searching z39.50 without selecting any servers results in error message Product: Koha Version: rel_3_0 Platform: All URL: http://koha:8080/cgi- bin/koha/cataloguing/z3950_search.pl OS/Version: All Status: NEW Severity: minor Priority: P5 Component: Z39.50 / SRU / OpenSearch Servers AssignedTo: gmcharlt(a)gmail.com ReportedBy: mjr(a)ttllp.co.uk Estimated Hours: 0.0 Change sponsored?: Seeking cosponsors Searching z39.50 without selecting any servers (silly but happened) results in the following debug error message. This could be avoided in z3950_search.pl Koha error The following fatal error has occurred: Modification of non-creatable array value attempted, subscript -4 at /usr/share/koha/intranet/cgi-bin/cataloguing/z3950_search.pl line 196. Apache Server version: Apache/2.2.9 (Debian) Server built: Nov 14 2009 20:21:34 Koha 3.00.05.003 Koha DB 3.0005003 MySQL mysql Ver 14.12 Distrib 5.0.51a, for debian-linux-gnu (i486) using readline 5.2 OS Linux cooperative 2.6.26-2-686 #1 SMP Sat Dec 26 11:29:49 UTC 2009 i686 Perl 5.010000 -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0

[Bug 3090] Minor usability problems with runreport.pl
by bugzilla-daemon＠kohaorg.ec2.liblime.com 15 Feb '10

15 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3090 --- Comment #4 from Garry Collum <gcollum(a)gmail.com> 2010-02-15 16:46:32 --- Created an attachment (id=1625) --> (http://bugs.koha.org/cgi-bin/bugzilla3/attachment.cgi?id=1625) Proposed patch. Adds ID field to saved reports. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0