October 2012 - Koha-bugs - lists.koha-community.org

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 12 Oct '12

12 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 Paul Poulain <paul.poulain(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to Master Version|master |rel_3_8 --- Comment #26 from Paul Poulain <paul.poulain(a)biblibre.com> --- Patch pushed to master -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 11 Oct '12

11 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 Mason James <mtj(a)kohaaloha.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |Passed QA CC| |mtj(a)kohaaloha.com QA Contact| |mtj(a)kohaaloha.com --- Comment #25 from Mason James <mtj(a)kohaaloha.com> --- (In reply to comment #24) > Created attachment 12741 [details] > [SIGNED-OFF] Bug 3652 XSS vulnerability in facets > > Signed-off-by: Katrin Fischer <Katrin.Fischer.83(a)web.de> > Confirmed bug with test plan on the bug and checked that > problem is fixed after applying the patch and that facets > still work. 3 patches look good, passing QA - well spotted! $ koha-qa.pl -c 3 testing 3 commit(s) (applied to commit 0c75d66) * 55c3117 Bug 3652 XSS vulnerability in facets koha-tmpl/opac-tmpl/prog/en/includes/opac-facets.inc * 210a889 Bug 3652: XSS vulnerability in page numbering koha-tmpl/opac-tmpl/prog/en/includes/page-numbers.inc * f2db538 Bug 3652 : [SIGNED-OFF] [SECURITY] XSS vulnerability koha-tmpl/opac-tmpl/prog/en/modules/opac-shelves.tt * koha-tmpl/opac-tmpl/prog/en/includes/opac-facets.inc OK * koha-tmpl/opac-tmpl/prog/en/includes/page-numbers.inc OK * koha-tmpl/opac-tmpl/prog/en/modules/opac-shelves.tt OK -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 8700] New: RESERVESLIP fields not being replaced correctly
by bugzilla-daemon＠bugs.koha-community.org 10 Oct '12

10 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8700 Priority: P5 - low Change sponsored?: --- Bug ID: 8700 CC: gmcharlt(a)gmail.com Assignee: koha-bugs(a)lists.koha-community.org Summary: RESERVESLIP fields not being replaced correctly Severity: normal Classification: Unclassified OS: All Reporter: kyle(a)bywatersolutions.com Hardware: All Status: NEW Version: master Component: Hold requests Product: Koha Tthe slip RESERVESLIP is not replacing fields correctly. C4::Reserves::ReserveSlip calls C4::Letters::GetPreparedLetter, and passes the $reserve hashref to it for each table except branches ( which is passed the branchcode ). The problem is, if you pass a hashref for a table, it uses that hashref for the replacing, rather than looking up the data from the database. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 11

[Bug 8441] New: Hide MODS export for UNIMARC
by bugzilla-daemon＠bugs.koha-community.org 10 Oct '12

10 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8441 Priority: P5 - low Change sponsored?: --- Bug ID: 8441 Assignee: adrien.saurat(a)biblibre.com Summary: Hide MODS export for UNIMARC Severity: minor Classification: Unclassified OS: All Reporter: adrien.saurat(a)biblibre.com Hardware: All Status: ASSIGNED Version: master Component: OPAC Product: Koha Koha doesn't handle export of biblios in MODS format. Test plan : Search for biblios in the OPAC Access a biblio Export to MODS(XML) Read the file : it only contains an error message It would be better to hide this option as long as MODS is not available. -- You are receiving this mail because: You are watching all bug changes.

1 9

[Bug 8900] New: link_bibs_to_authorities.pl --test updates auth_header records with AutoAddAuthorites on
by bugzilla-daemon＠bugs.koha-community.org 10 Oct '12

10 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8900 Priority: P5 - low Change sponsored?: --- Bug ID: 8900 Assignee: gmcharlt(a)gmail.com Summary: link_bibs_to_authorities.pl --test updates auth_header records with AutoAddAuthorites on Severity: normal Classification: Unclassified OS: All Reporter: matted-34813(a)mypacks.net Hardware: All Status: NEW Version: master Component: Command-line Utilities Product: Koha I noticed that when i ran link_bibs_to_authorites.pl with --test, it calls LinkBibHeadingsToAuthorities in Biblio.pm, which if you have the AutoAddAuthorities syspref enabled, calls AddAuthority, which results in auth_header being inserted/updated. So the --test option won't prevent updates. This can burn someone if run in production. It correctly skips ModBiblio in the link_bibs_to_authorites.pl script. I was doing a test run migration from 3.0 to pre-3.10 master(2012-10-10) and had deleted all my auth_header records. Of course after rebuilding my biblio/auth zebra index (-b -a -r) I ran the script with --test, but saw auth_header records were added. Since my library only had machine generated auth records, and I needed to clean up duplicate authority records from 3.0 behaviors, I was taking this route since no deduplication script exists, yet. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 2832] Make alphabet localizable
by bugzilla-daemon＠bugs.koha-community.org 10 Oct '12

10 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2832 Magnus Enger <magnus(a)enger.priv.no> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |Needs Signoff --- Comment #8 from Magnus Enger <magnus(a)enger.priv.no> --- Using a non-delimited string of characters as first described did not work, because split() divided chars like Æ into two separate thingies, as described here: http://www.effectiveperlprogramming.com/blog/1286 A space delimited string is less elegant, but should get the job done. -- You are receiving this mail because: You are the QA Contact for the bug. You are on the CC list for the bug. You are watching all bug changes.

1 0

[Bug 2832] Make alphabet localizable
by bugzilla-daemon＠bugs.koha-community.org 10 Oct '12

10 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2832 --- Comment #7 from Magnus Enger <magnus(a)enger.priv.no> --- Created attachment 12761 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=12761&action=edit Bug 2832 - Make alphabet localizable Adds the "alphabet" syspref, which can hold a space separated list of charachters, which can be expanded into browse links when needed. To test: - Make sure to run updatedatabase - Check that the "alphabet" syspref was added under "I18N/L10N preferences" - Check that browse links are displayed Home › Patrons - Add some weird charachters like ÆØÅ to "alphabet" and check that the browse links are still displayed ok -- You are receiving this mail because: You are the QA Contact for the bug. You are on the CC list for the bug. You are watching all bug changes.

1 0

[Bug 2832] Make alphabet localizable
by bugzilla-daemon＠bugs.koha-community.org 10 Oct '12

10 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2832 Magnus Enger <magnus(a)enger.priv.no> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Alphabete not lokalizable |Make alphabet localizable -- You are receiving this mail because: You are the QA Contact for the bug. You are on the CC list for the bug. You are watching all bug changes.

1 0

[Bug 2832] Alphabete not lokalizable
by bugzilla-daemon＠bugs.koha-community.org 10 Oct '12

10 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2832 Magnus Enger <magnus(a)enger.priv.no> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED Assignee|gmcharlt(a)gmail.com |magnus(a)enger.priv.no --- Comment #6 from Magnus Enger <magnus(a)enger.priv.no> --- (In reply to comment #5) > I like the idea of a syspref too ... now we just need someone to write the > code :) I'll take a stab at it. -- You are receiving this mail because: You are the QA Contact for the bug. You are on the CC list for the bug. You are watching all bug changes.

1 0

[Bug 7375] New: The web installer asks for the wrong Perl version
by bugzilla-daemon＠bugs.koha-community.org 10 Oct '12

10 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7375 Bug #: 7375 Summary: The web installer asks for the wrong Perl version Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All OS/Version: All Status: NEW Severity: minor Priority: P5 - low Component: Installation and upgrade (web-based installer) AssignedTo: magnus(a)enger.priv.no ReportedBy: magnus(a)enger.priv.no QAContact: ian.walls(a)bywatersolutions.com CC: gmcharlt(a)gmail.com koha-tmpl/intranet-tmpl/prog/en/modules/installer/step1.tt: 52 <li>Your perl version seems to be obsolete. 53 Please upgrade to a newer version of Perl (at least Version 5.006001).</li> This should say at least version 5.10. How should the version number be formatted? Is a simple "5.10" enough or should it be something like "5.010001"? -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 11