November 2011 - Koha-bugs - lists.koha-community.org

[Bug 2847] Use HTML escape in templates where appropriate
by bugzilla-daemon＠bugs.koha-community.org 23 Nov '11

23 Nov '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2847 --- Comment #6 from Chris Nighswonger <cnighswonger(a)foundations.edu> 2011-11-23 13:07:05 UTC --- (In reply to comment #5) > is it just a problem on 3.4 ? it's OK for 3.6 ? > In this case, I think we can stay without this fix in 3.4 : it's a security > issue, I agree, but: > * it's staff related, so, to exploit such a bug, one would first need to have a > valid login, so, the risk is low according to me. IMHO any security issue should be backported into any currently maintained branch. > * 3.4 EOL is probably close Not as close as we might imagine. As long as commits will apply, I plan on keeping 3.4.x alive until we reach a year from 3.6.x release. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0

[Bug 2847] Use HTML escape in templates where appropriate
by bugzilla-daemon＠bugs.koha-community.org 23 Nov '11

23 Nov '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2847 --- Comment #5 from Paul Poulain <paul.poulain(a)biblibre.com> 2011-11-23 11:26:44 UTC --- is it just a problem on 3.4 ? it's OK for 3.6 ? In this case, I think we can stay without this fix in 3.4 : it's a security issue, I agree, but: * it's staff related, so, to exploit such a bug, one would first need to have a valid login, so, the risk is low according to me. * 3.4 EOL is probably close -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0

[Bug 6500] New: patron search by branch doesn't work
by bugzilla-daemon＠bugs.koha-community.org 22 Nov '11

22 Nov '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6500 Bug #: 6500 Summary: patron search by branch doesn't work Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All OS/Version: All Status: NEW Severity: critical Priority: P5 Component: Patrons AssignedTo: kyle.m.hall(a)gmail.com ReportedBy: nengard(a)gmail.com QAContact: koha-bugs(a)lists.koha-community.org CC: gmcharlt(a)gmail.com I'm surprised to see that this was not reported yet since it's such a big issue. If you restrict a patron search by branch from the patron screen, it appears to be returning all patrons for the branch, not applying the name search criteria. If you leave it as any branch, it appears to apply the name search criteria. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 1

[Bug 4045] No check for maximum number of allowed holds.
by bugzilla-daemon＠bugs.koha-community.org 22 Nov '11

22 Nov '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4045 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |6976 -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 3638] Status of hold not changed when item checked in via SIP2 Interface
by bugzilla-daemon＠bugs.koha-community.org 21 Nov '11

21 Nov '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3638 --- Comment #13 from Colin Campbell <colin.campbell(a)ptfs-europe.com> 2011-11-21 11:15:33 UTC --- Patches complement each other see previous comment -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 4330] Copyright statements out of date
by bugzilla-daemon＠bugs.koha-community.org 21 Nov '11

21 Nov '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4330 M. de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |m.de.rooy(a)rijksmuseum.nl Patch Status|Needs Signoff |Passed QA QAContact|koha-bugs(a)lists.koha-commun |m.de.rooy(a)rijksmuseum.nl |ity.org | --- Comment #14 from M. de Rooy <m.de.rooy(a)rijksmuseum.nl> 2011-11-21 07:51:38 UTC --- QA: Only textual changes. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 4330] Copyright statements out of date
by bugzilla-daemon＠bugs.koha-community.org 21 Nov '11

21 Nov '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4330 M. de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #6363|0 |1 is obsolete| | --- Comment #13 from M. de Rooy <m.de.rooy(a)rijksmuseum.nl> 2011-11-21 07:49:54 UTC --- Created attachment 6365 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6365 Signed patch: missing license -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 4330] Copyright statements out of date
by bugzilla-daemon＠bugs.koha-community.org 21 Nov '11

21 Nov '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4330 M. de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #6362|0 |1 is obsolete| | --- Comment #12 from M. de Rooy <m.de.rooy(a)rijksmuseum.nl> 2011-11-21 07:47:21 UTC --- Created attachment 6364 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6364 Signed patch: address FSF -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 4330] Copyright statements out of date
by bugzilla-daemon＠bugs.koha-community.org 21 Nov '11

21 Nov '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4330 M. de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #5028|0 |1 is obsolete| | -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 4330] Copyright statements out of date
by bugzilla-daemon＠bugs.koha-community.org 21 Nov '11

21 Nov '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4330 --- Comment #11 from Chris Cormack <chris(a)bigballofwax.co.nz> 2011-11-21 07:31:58 UTC --- Created attachment 6363 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6363 Bug 4330: Missing License Statement -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.

1 0