December 2011 - Koha-bugs - lists.koha-community.org

[Bug 7323] New: Javascript error when editing list
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7323 Bug #: 7323 Summary: Javascript error when editing list Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All URL: /cgi-bin/koha/virtualshelves/shelves.pl?shelfnumber=XX &op=modif OS/Version: All Status: ASSIGNED Severity: minor Priority: P5 - low Component: Virtual Shelves AssignedTo: oleonard(a)myacpl.org ReportedBy: oleonard(a)myacpl.org QAContact: ian.walls(a)bywatersolutions.com Firebug reports an error when editing a list in the staff client: f.addshelf is undefined Line 186 -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 6

[Bug 6628] New: [security] help system use insecure REFERRER for file inclusion
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6628 Bug #: 6628 Summary: [security] help system use insecure REFERRER for file inclusion Classification: Unclassified Change sponsored?: --- Product: Koha Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Architecture, internals, and plumbing AssignedTo: gmcharlt(a)gmail.com ReportedBy: semarie-koha(a)latrappe.fr QAContact: koha-bugs(a)lists.koha-community.org The 'help.pl' use REFERRER HTTP-Header for determine which template should be displayed to user. This HTTP-Header could be forged by user. CWE-73: External Control of File Name or Path (see http://cwe.mitre.org/data/definitions/73.html) The template name is extracted from REFERRER which regex: > our $refer = $query->referer(); > $refer =~ /koha\/(.*)\.pl/; > my $from = "modules/help/$1.tt"; So it is possible to have a referer like: http://xxx/koha/EVIL-THING.plxxx and $from should be egal to "modules/help/EVIL-THING.tt" Some suggestions: - It should be better to have a better regex for extract the help template: like only allow a-zA-Z, '-' and '/' (not including '.' [for ".."], but including '/' for help templates like "members/boraccount.tt") - It will be better to rename all help templates from: "members/boraccount.tt" to "members-boraccount.tt", in order to remove need of '/' in regex. And all '/' in value taken from referer must be remplaced by '-'. ('-' in path is less worst than '/'). -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 17

[Bug 6776] New: Add Checkin tab to patron search tool
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6776 Bug #: 6776 Summary: Add Checkin tab to patron search tool Classification: Unclassified Change sponsored?: --- Product: Koha Version: rel_3_6 Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Circulation AssignedTo: kyle.m.hall(a)gmail.com ReportedBy: savitra.sirohi(a)osslabs.biz QAContact: koha-bugs(a)lists.koha-community.org CC: gmcharlt(a)gmail.com Add check-in as an option in patron-search.inc, thus allowing a checkin tab to be available in several patron and circulation pages -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 20

[Bug 6987] New: C4::Overdues::GetFine returns inconsistent
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6987 Bug #: 6987 Summary: C4::Overdues::GetFine returns inconsistent Classification: Unclassified Change sponsored?: --- Product: Koha Version: unspecified Platform: All OS/Version: All Status: NEW Severity: minor Priority: P5 Component: Circulation AssignedTo: kyle.m.hall(a)gmail.com ReportedBy: colin.campbell(a)ptfs-europe.com QAContact: koha-bugs(a)lists.koha-community.org CC: gmcharlt(a)gmail.com The subroutine GetFine returns the amount of the fine owing but if that is none it returns undef. This results in warnings 'undefined variable $fine' in overdues causing concern for users seeing this report if the amount is 0 that should be returned rather than causing problems for calling code -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 8

[Bug 7336] New: memberentry.pl generates an error in the log
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7336 Bug #: 7336 Summary: memberentry.pl generates an error in the log Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All OS/Version: All Status: NEW Severity: minor Priority: P5 - low Component: Patrons AssignedTo: kyle.m.hall(a)gmail.com ReportedBy: oleonard(a)myacpl.org QAContact: ian.walls(a)bywatersolutions.com CC: gmcharlt(a)gmail.com Use of uninitialized value $data{"debarred"} in string ne at /members/memberentry.pl line 652. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 5

[Bug 7197] New: ES translation of the Debian readme
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7197 Bug #: 7197 Summary: ES translation of the Debian readme Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 - low Component: Packaging AssignedTo: robin(a)catalyst.net.nz ReportedBy: robin(a)catalyst.net.nz QAContact: ian.walls(a)bywatersolutions.com Created attachment 6259 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6259 Spanish readme file This should probably get installed alongside the English version. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 8

[Bug 7033] New: Make all strings translatable in marc21_field_007.tt
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7033 Bug #: 7033 Summary: Make all strings translatable in marc21_field_007.tt Classification: Unclassified Change sponsored?: --- Product: Koha Version: rel_3_6 Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Cataloging AssignedTo: gmcharlt(a)gmail.com ReportedBy: fcapovilla(a)live.ca QAContact: koha-bugs(a)lists.koha-community.org CC: ian.walls(a)bywatersolutions.com Created attachment 5894 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=5894 Make all strings translatable in marc21_field_007.tt This patch adds _("") around javascript strings that couldn't be translated by the translate.pl script. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 12

[Bug 6966] New: Update Help Files for Koha 3.6 Release
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6966 Bug #: 6966 Summary: Update Help Files for Koha 3.6 Release Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All OS/Version: All Status: ASSIGNED Severity: normal Priority: P5 Component: Documentation AssignedTo: nengard(a)gmail.com ReportedBy: nengard(a)gmail.com QAContact: koha-bugs(a)lists.koha-community.org This is a standing ticket for updates to the in system Koha help files before the 3.6 release. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 34

[Bug 6926] New: overdue_notices don't send itemcount to notification
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6926 Bug #: 6926 Summary: overdue_notices don't send itemcount to notification Classification: Unclassified Change sponsored?: --- Product: Koha Version: rel_3_6 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Command-line Utilities AssignedTo: gmcharlt(a)gmail.com ReportedBy: paul.poulain(a)biblibre.com QAContact: koha-bugs(a)lists.koha-community.org In advanced_notices.pl you can return the number of due items using <<count>> flag. If you use this flag in overdue_notices, it does not work, no number is displayed. Step to reproduce : Attach the default DUEDGST notification to overdue rules, and run advanced_notices.pl -n, You should see something like : You have items due instead of You have 2 items due (2, or 1, or 3, or whatever you've overdue) -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 8

[Bug 6150] New: UNIMARC field 225 plugin: allow $a value data entry
by bugzilla-daemon＠bugs.koha-community.org 23 May '12

23 May '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6150 Bug #: 6150 Summary: UNIMARC field 225 plugin: allow $a value data entry Classification: Unclassified Change sponsored?: --- Product: Koha Version: rel_3_6 Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Cataloging AssignedTo: gmcharlt(a)gmail.com ReportedBy: frederic(a)tamil.fr QAContact: koha-bugs(a)lists.koha-community.org CC: ian.walls(a)bywatersolutions.com The current UNIMARC 225 plugin behavior forces cataloguer to select a collection name in a combo box. The content of this combo box comes from special EDITORS authorities list which is constructed by a script. So there is no way to add a new collection directly in biblio data entry form. A input box can be added to the plugin form in order to enter by hand a new collection. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 10