August 2010 - Koha-bugs - lists.koha-community.org

[Bug 5099] New: Avanced Search page unavailable when OpacGroupResults is used
by bugzilla-daemon＠bugs.koha-community.org 05 Aug '11

05 Aug '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5099 Summary: Avanced Search page unavailable when OpacGroupResults is used Change sponsored?: --- Product: Koha Version: rel_3_2 Platform: All OS/Version: All Status: NEW Severity: blocker Priority: P5 Component: Searching AssignedTo: gmcharlt(a)gmail.com ReportedBy: brice.sanchez(a)sys-tech.net QAContact: koha-bugs(a)lists.koha-community.org Estimated Hours: 0.0 I have a fresh install of Koha 3.2 up-to-date with GIT Zebra + Pazpar2 are running But if i use "OpacGroupResults" in System Preferences, i can't go to "Advanced search" page in OPAC, the system return : "No Result found! No results match your search for “ ” in Catalog." instead of the form : "Search for: keyword..." Is it normal ? -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 4

[Bug 4810] New: parcel.pl: Fix a bug with applying a filter on pending orders displaying
by bugzilla-daemon＠bugs.koha-community.org 05 Aug '11

05 Aug '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4810 Summary: parcel.pl: Fix a bug with applying a filter on pending orders displaying Change sponsored?: --- Product: Koha Version: rel_3_2 Platform: All OS/Version: All Status: NEW Severity: major Priority: P5 Component: Acquisitions AssignedTo: chris(a)bigballofwax.co.nz ReportedBy: alex.arnaud(a)biblibre.com QAContact: koha-bugs(a)lists.koha-community.org Estimated Hours: 0.0 When we apply a filter and click on "Click here to show x items" link, there are duplicates orders which are display. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 4

[Bug 5131] New: XSS vulnerability in the OPAC search results interface
by bugzilla-daemon＠bugs.koha-community.org 04 Aug '11

04 Aug '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5131 Summary: XSS vulnerability in the OPAC search results interface Change sponsored?: --- Product: Koha Version: HEAD Platform: All OS/Version: All Status: NEW Severity: critical Priority: P5 Component: OPAC AssignedTo: oleonard(a)myacpl.org ReportedBy: robin(a)catalyst.net.nz QAContact: koha-bugs(a)lists.koha-community.org Estimated Hours: 0.0 In opac-search.pl: foreach my $sort (@sort_by) { $template->param($sort => 1); # FIXME: security hole. can set any TMPL_VAR here } This makes it pretty easy for someone to do things like inject arbitrary HTML and Javascript, and so steal the credentials of another user. This operation needs a whitelist of valid values that it checks against. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 9

[Bug 5053] New: singleBranchMode should control branch display all over
by bugzilla-daemon＠bugs.koha-community.org 02 Aug '11

02 Aug '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5053 Summary: singleBranchMode should control branch display all over Change sponsored?: --- Product: Koha Version: HEAD Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: System Administration AssignedTo: paul.poulain(a)biblibre.com ReportedBy: nengard(a)gmail.com QAContact: koha-bugs(a)lists.koha-community.org CC: gmcharlt(a)gmail.com Estimated Hours: 0.0 When singleBranchMode is turned on all displays of multiple branches should be turned off: * Location on holdings in OPAC should only show shelving location * Location on holdings in Staff Client should only show shelving location * Branch selection pull downs should be hidden (everywhere) * Branch display in XSLT search results shouldn't appear There may be more I can add to this, but basic idea is that if there is one branch there is no reason to tell people what branch things are at. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 1

[Bug 5164] New: overdue script and csv
by bugzilla-daemon＠bugs.koha-community.org 01 Aug '11

01 Aug '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5164 Summary: overdue script and csv Change sponsored?: --- Product: Koha Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Command-line Utilities AssignedTo: gmcharlt(a)gmail.com ReportedBy: nahuel.angelinetti(a)biblibre.com QAContact: koha-bugs(a)lists.koha-community.org Estimated Hours: 0.0 The CSV sent by email contains 2 times the column name, and it contains empty lines, that break the publiposting. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 7

[Bug 4846] New: Pending Holds/Reserves lists undefined item
by bugzilla-daemon＠bugs.koha-community.org 01 Aug '11

01 Aug '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4846 Summary: Pending Holds/Reserves lists undefined item Change sponsored?: --- Product: Koha Version: rel_3_0 Platform: All URL: http://10.100.30.53:8080/cgi-bin/koha/circ/pendingrese rves.pl OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Circulation AssignedTo: kyle.m.hall(a)gmail.com ReportedBy: cbrannon(a)cdalibrary.org QAContact: koha-bugs(a)lists.koha-community.org CC: gmcharlt(a)gmail.com Estimated Hours: 0.0 In 3.0.6, if I have an item listed in the "Holds to pull", it adds a second item in the list called "undefined". The link for this item is http://10.100.30.53:8080/cgi-bin/koha/catalogue/detail.pl?biblionumber=unde…. This listing disappears when there are no items in the list. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 1

[Bug 4995] New: extended attributes replication from LDAP
by bugzilla-daemon＠bugs.koha-community.org 28 Jul '11

28 Jul '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4995 Summary: extended attributes replication from LDAP Change sponsored?: --- Product: Koha Version: rel_3_0 Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Authentication AssignedTo: gmcharlt(a)gmail.com ReportedBy: dpavlin(a)rot13.org QAContact: koha-bugs(a)lists.koha-community.org CC: dpavlin(a)rot13.org Estimated Hours: 0.0 Documentation for extended attributes is somewhat lacking, and my last patch in my previous bug report just fixed case without any extended attributes in LDAP. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 9

[Bug 4863] New: Bookfund.pm lacks use C4::Context
by bugzilla-daemon＠bugs.koha-community.org 19 Jul '11

19 Jul '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4863 Summary: Bookfund.pm lacks use C4::Context Change sponsored?: --- Product: Koha Version: rel_3_0 Platform: All OS/Version: All Status: NEW Severity: major Priority: P5 Component: Acquisitions AssignedTo: henridamien(a)koha-fr.org ReportedBy: evelio(a)masmedios.com QAContact: koha-bugs(a)lists.koha-community.org Estimated Hours: 0.0 After installing koha community 3.0.6 we have a 500 error invoking the following URL on our internal server http://koha2:8088/cgi-bin/koha/acqui/acqui-home.pl change the exchange rate and save, it redirects to http://koha2:8088/cgi-bin/koha/acqui/currency.pl?type=change&CAD=1.29540&ty… and then get the 500 error. Logs says [Wed Jun 09 10:53:36 2010] [error] [client 192.168.x.y] Can't locate object method "dbh" via package "C4::Context" (perhaps you forgot to load "C4::Context"?) at /home/www/koha_bage/lib/C4/Bookfund.pm line 399., referer: http://koha2:8088/cgi-bin/koha/acqui/acqui-home.pl [Wed Jun 09 10:53:36 2010] [error] [client 192.168.x.y] Premature end of script headers: currency.pl, referer: http://koha2:8088/cgi-bin/koha/acqui/acqui-home.pl we have fixed adding the following line at the begining of the file Bookfund.pm use C4::Context; -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 2

[Bug 4994] New: ldap mapping inconsistancy: Net::LDAP returns lowercase names
by bugzilla-daemon＠bugs.koha-community.org 14 Jul '11

14 Jul '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4994 Summary: ldap mapping inconsistancy: Net::LDAP returns lowercase names Change sponsored?: --- Product: Koha Version: rel_3_0 Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Authentication AssignedTo: gmcharlt(a)gmail.com ReportedBy: dpavlin(a)rot13.org QAContact: koha-bugs(a)lists.koha-community.org CC: dpavlin(a)rot13.org Estimated Hours: 0.0 This requires us to specify all LDAP mappings in koha-conf.xml in lowercase, instead of original case used withing LDAP. Compare readability of <userid is="hrEduPersonUniqueID" ></userid> (which doesn't work) with required (and non-intuitive) <userid is="hredupersonuniqueid" ></userid> -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 8

[Bug 4993] New: ldap search always anonymous when using auth_by_bind
by bugzilla-daemon＠bugs.koha-community.org 14 Jul '11

14 Jul '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4993 Summary: ldap search always anonymous when using auth_by_bind Change sponsored?: --- Product: Koha Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Authentication AssignedTo: gmcharlt(a)gmail.com ReportedBy: dpavlin(a)rot13.org QAContact: koha-bugs(a)lists.koha-community.org Estimated Hours: 0.0 When using auth_by_bind, search was always done as anonymous user. This is a problem if we want to fetch LDAP values which have ACL permissions only for users. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 11