December 2011 - Koha-bugs - lists.koha-community.org

[Bug 3280] opac/opac-sendbasket.pl security leaky
by bugzilla-daemon＠bugs.koha-community.org 04 Dec '11

04 Dec '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280 Frère Sébastien Marie <semarie-koha(a)latrappe.fr> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |semarie-koha(a)latrappe.fr -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0

[Bug 3290] message queue table needs a timestamp.
by bugzilla-daemon＠bugs.koha-community.org 04 Dec '11

04 Dec '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3290 Ian Walls <ian.walls(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |ian.walls@bywatersolutions. | |com Resolution| |FIXED --- Comment #1 from Ian Walls <ian.walls(a)bywatersolutions.com> 2011-12-04 18:06:23 UTC --- message_queue.time_queued is updated every time the message is updated, thus it serves the function requested in this report. It should really be renamed to something more generic like 'timestamp', but that's a cosmetic change, not a functional one. Marking this as resolved. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0

[Bug 3280] opac/opac-sendbasket.pl security leaky
by bugzilla-daemon＠bugs.koha-community.org 04 Dec '11

04 Dec '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280 Ian Walls <ian.walls(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ian.walls@bywatersolutions. | |com --- Comment #1 from Ian Walls <ian.walls(a)bywatersolutions.com> 2011-12-04 18:01:52 UTC --- Confirmed this is still an issue. Not sure there is any good way around this. To truly solve the issue, we'd need to be able to separate the spam from the ham (as it were), which is too subjective to handle systematically. Perhaps instead of allowing arbitrary email addresses, we only allow either other borrowernumbers (so you can send to your friends) or a selection of one of the patron's own email addresses. The latter would be much easier than the former. This would reduce the flexibility of opac-sendbasket, but I think that flexibility is the fundamental security issue here. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 3279] Renewal date set past date set for "Global Due Date"
by bugzilla-daemon＠bugs.koha-community.org 04 Dec '11

04 Dec '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3279 Ian Walls <ian.walls(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |ian.walls@bywatersolutions. | |com Resolution| |FIXED --- Comment #1 from Ian Walls <ian.walls(a)bywatersolutions.com> 2011-12-04 17:46:55 UTC --- I don't believe this is a problem any more, now that Global Due Date has been removed in favour of the circ rules level "Hard Due Dates" enhancement. Renewing materials under a "global" due date still returns the global date. Marking as resolved. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0

[Bug 2616] unnecessary 'use HTML::Template'
by bugzilla-daemon＠bugs.koha-community.org 04 Dec '11

04 Dec '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2616 Ian Walls <ian.walls(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P3 |PATCH-Sent CC| |ian.walls@bywatersolutions. | |com Patch Status|--- |Needs Signoff QAContact|koha-bugs(a)lists.koha-commun |m.de.rooy(a)rijksmuseum.nl |ity.org | -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 2616] unnecessary 'use HTML::Template'
by bugzilla-daemon＠bugs.koha-community.org 04 Dec '11

04 Dec '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2616 --- Comment #2 from Ian Walls <ian.walls(a)bywatersolutions.com> 2011-12-04 17:35:08 UTC --- Created attachment 6566 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6566 Proposed Patch Removes 4 unnecessary calls to HTML::Template or HTML::Template::Pro -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 2346] consolidate duplicate methods C4::Overdues::UpdateBorrowerDebarred and C4::Members::DebarMember
by bugzilla-daemon＠bugs.koha-community.org 04 Dec '11

04 Dec '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2346 Ian Walls <ian.walls(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P3 |PATCH-Sent Patch Status|--- |Needs Signoff QAContact|koha-bugs(a)lists.koha-commun |jonathan.druart(a)biblibre.co |ity.org |m -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 2346] consolidate duplicate methods C4::Overdues::UpdateBorrowerDebarred and C4::Members::DebarMember
by bugzilla-daemon＠bugs.koha-community.org 04 Dec '11

04 Dec '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2346 --- Comment #3 from Ian Walls <ian.walls(a)bywatersolutions.com> 2011-12-04 17:21:25 UTC --- Created attachment 6564 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6564 Proposed patch to remove UpdateBorrowerDebarred Removes UpdateBorrowerDebarred subroutine and associated test, now that it's no longer relevant (since bug 6328) -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 2346] consolidate duplicate methods C4::Overdues::UpdateBorrowerDebarred and C4::Members::DebarMember
by bugzilla-daemon＠bugs.koha-community.org 04 Dec '11

04 Dec '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2346 Ian Walls <ian.walls(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ian.walls@bywatersolutions. | |com --- Comment #2 from Ian Walls <ian.walls(a)bywatersolutions.com> 2011-12-04 17:16:35 UTC --- This issue is resolved with the inclusion of bug 6328. UpdateBorrowerDebarred has been removed from usage except in the deprecated script notifyMailsOp.pl, and there it is overridden by a local subroutine. This script has a bug filed against it for removal (bug 7315), so I believe it is safe to remove UpdateBorrowerDebarred from C4::Overdues. Patch forthcoming. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 2092] Koha should support Unicode 6
by bugzilla-daemon＠bugs.koha-community.org 04 Dec '11

04 Dec '11

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2092 Ian Walls <ian.walls(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ian.walls@bywatersolutions. | |com Summary|Koha should support Unicode |Koha should support Unicode |5.1 |6 --- Comment #1 from Ian Walls <ian.walls(a)bywatersolutions.com> 2011-12-04 17:02:02 UTC --- Updating bug report: Unicode 6 has been released, including support for the Indian Rupee symbol. See http://unicode.org/versions/Unicode6.0.0/ for more details. Koha should support as current a Unicode version as possible. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0