October 2012 - Koha-bugs - lists.koha-community.org

[Bug 8841] New: Duedates set by Returnbeforeexpiry lack HH:MM
by bugzilla-daemon＠bugs.koha-community.org 24 Oct '12

24 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8841 Priority: P5 - low Change sponsored?: --- Bug ID: 8841 CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com Assignee: koha-bugs(a)lists.koha-community.org Summary: Duedates set by Returnbeforeexpiry lack HH:MM Severity: enhancement Classification: Unclassified OS: All Reporter: colin.campbell(a)ptfs-europe.com Hardware: All Status: NEW Version: master Component: Circulation Product: Koha The 'Return before expiry' syspref sets the issue duedate to the patrons expiry date. It is setting the HH:MM element to 00:00 as the expiry date lacks a time element. It should set it to the end of the patron's expiration date -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 6

[Bug 8849] New: Error log generated when not a demo system
by bugzilla-daemon＠bugs.koha-community.org 24 Oct '12

24 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8849 Priority: P5 - low Change sponsored?: --- Bug ID: 8849 CC: gmcharlt(a)gmail.com Assignee: koha-bugs(a)lists.koha-community.org Summary: Error log generated when not a demo system Severity: trivial Classification: Unclassified OS: All Reporter: mtompset(a)hotmail.com Hardware: All Status: NEW Version: rel_3_8 Component: System Administration Product: Koha As a result of: [Mon Oct 01 15:28:59 2012] [error] [client 192.168.100.2] [Mon Oct 1 15:28:59 2012] marctagstructure.pl: Use of uninitialized value in numeric eq (==) at /usr/share/koha/intranet/cgi-bin/admin/marctagstructure.pl line 152. in Koha 3.8.5 this patch was generated. The line reads unless (C4::Context->config('demo') == 1) { which produces an error long entry while tweaking frameworks. It should read: unless (defined(C4::Context->config('demo')) && C4::Context->config('demo') == 1) { -- though this will still generate an error if the value isn't numeric. I'm going to assume that whoever does use it, will use it correctly. My understanding is that this value must be set to 1 in koha-conf.xml to prevent writing out MARC Framework changes (adds or modifies). However, since 'demo' is not defined in the default koha-conf.xml, this generates an error. This feature is not documented anywhere, as far as I know. Though 'demo' code does seem to exist in a couple places in Koha. Patch to follow. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 13

[Bug 5116] New: Duplicate and missing entries in "apt-get-debian-lenny.sh"
by bugzilla-daemon＠bugs.koha-community.org 24 Oct '12

24 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5116 Summary: Duplicate and missing entries in "apt-get-debian-lenny.sh" Change sponsored?: --- Product: Koha Version: HEAD Platform: All OS/Version: Linux Status: NEW Severity: minor Priority: P5 Component: Installation and upgrade (command-line installer) AssignedTo: gmcharlt(a)gmail.com ReportedBy: ricmarques(a)spamcop.net QAContact: koha-bugs(a)lists.koha-community.org Estimated Hours: 0.0 Today (11-Aug-2010), I did a git clone from the Koha "master" branch - the branch that will lead to the 3.2 version - to a machine running Debian 5.0.5 (Debian "lenny") I ran the "apt-get-debian-lenny.sh" install script - located at "install_misc/apt-get-debian-lenny.sh" I noticed, in that script, there were some missing lines for packages that exist for Debian Lenny and that have versions that satisfy the requirements of the Koha Installer, listed in the "PerlDependencies.pm" file - located at "C4/Installer/PerlDependencies.pm" - namely: - libnet-server-perl "Net::Server" module. "PerlDependencies.pm" requires version 0.97 ('min_ver' => '0.97') and the debian package for Lenny - http://packages.debian.org/lenny/libnet-server-perl - is version "0.97-1", thus satisfying the version requirement. - libpdf-table-perl "PDF::Table" module. "PerlDependencies.pm" requires version 0.9.3 ('min_ver' => '0.9.3') and the debian package for Lenny - http://packages.debian.org/lenny/libpdf-table-perl - is version "0.9.3-2", thus satisfying the version requirement. I also noticed, in that same "apt-get-debian-lenny.sh" script, that there were some duplicate entries / lines for other modules. So: 1 - I added the missing "libnet-server-perl" and "libpdf-table-perl" lines 2 - I removed the duplicate entries I'll submit a patch, through git, and link it to this Bug Report. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 3

[Bug 8959] New: Self checkout timeout is JavaScript-dependent
by bugzilla-daemon＠bugs.koha-community.org 24 Oct '12

24 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8959 Priority: P5 - low Change sponsored?: --- Bug ID: 8959 Assignee: koha-bugs(a)lists.koha-community.org Summary: Self checkout timeout is JavaScript-dependent Severity: major Classification: Unclassified OS: All Reporter: oleonard(a)myacpl.org Hardware: All Status: NEW Version: master Component: Self checkout Product: Koha In my patch for Bug 8955 I removed some references to a "timeout" variable from the script and the template because they were unused. In fact there is no handling of the patron's session server-side, besides passing the SelfCheckTimeout value to the template. If a self checkout station were to have JavaScript disabled, there would be no automatic timeout of patron sessions. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 6610] New: Integration of Google Analytics in Koha.
by bugzilla-daemon＠bugs.koha-community.org 24 Oct '12

24 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6610 Bug #: 6610 Summary: Integration of Google Analytics in Koha. Classification: Unclassified Change sponsored?: --- Product: Koha Version: rel_3_6 Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: OPAC AssignedTo: oleonard(a)myacpl.org ReportedBy: juan.sieira(a)xercode.es QAContact: koha-bugs(a)lists.koha-community.org New system preference for the introduction of Google Analytics in the Koha ILS. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 17

[Bug 2832] Make alphabet localizable
by bugzilla-daemon＠bugs.koha-community.org 24 Oct '12

24 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2832 Jonathan Druart <jonathan.druart(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- QA Contact|koha-bugs(a)lists.koha-commun |jonathan.druart(a)biblibre.co |ity.org |m -- You are receiving this mail because: You are the QA Contact for the bug. You are on the CC list for the bug. You are watching all bug changes.

1 0

[Bug 2832] Make alphabet localizable
by bugzilla-daemon＠bugs.koha-community.org 24 Oct '12

24 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2832 Jonathan Druart <jonathan.druart(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |Needs Signoff -- You are receiving this mail because: You are the QA Contact for the bug. You are on the CC list for the bug. You are watching all bug changes.

1 0

[Bug 2832] Make alphabet localizable
by bugzilla-daemon＠bugs.koha-community.org 24 Oct '12

24 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2832 --- Comment #13 from Jonathan Druart <jonathan.druart(a)biblibre.com> --- Created attachment 13021 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=13021&action=edit Bug 2832: Followup: Add a default value -- You are receiving this mail because: You are the QA Contact for the bug. You are on the CC list for the bug. You are watching all bug changes.

1 0

[Bug 2832] Make alphabet localizable
by bugzilla-daemon＠bugs.koha-community.org 24 Oct '12

24 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2832 Jonathan Druart <jonathan.druart(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jonathan.druart(a)biblibre.co | |m --- Comment #12 from Jonathan Druart <jonathan.druart(a)biblibre.com> --- QA Comment: If the syspref is empty, I have a "Browse by last name:". Either we display nothing or we display a default value. I will proposed a little patch for the second option. Fell free to propose another one :) -- You are receiving this mail because: You are the QA Contact for the bug. You are on the CC list for the bug. You are watching all bug changes.

1 0

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 24 Oct '12

24 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 Paul Poulain <paul.poulain(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |ASSIGNED Version|master |rel_3_10 --- Comment #46 from Paul Poulain <paul.poulain(a)biblibre.com> --- The 3 patches Bug 3652: close XSS vulnerabilities on biblionumber and authid (3.40 KB, patch) Bug 3652: close XSS vulnerabilities in opac-export (2.62 KB, patch) bug 3652 fixing XSS vulnerabilities in opac-search (3.04 KB, patch) have been pushed QA comment for Bug 3652: close XSS vulnerabilities on biblionumber and authid (3.40 KB, patch) = I made a follow-up to remove the || $query->param('bib'); (see comment 38) I think opac-detail.pl could also be fixed, but in case there's an old reference to this, I won't do that without a specific patch. Comment for opac-search = the XSS did not work for me if I entered > Search in the opac for ';</script><script>alert(10);</alert>' If was exploitable only with > /cgi-bin/koha/opac-search. > pl?q=%3B%3C%2Fscript%3E%3Cscript%3Ealert%2810%29%3B%3C%2Fscript%3E but it's worth pushing it anyway status back to ASSIGNED if another XSS vulnerability is found & fixed -- You are receiving this mail because: You are watching all bug changes.

1 0