March 2012 - Koha-bugs - lists.koha-community.org

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 19 Mar '12

19 Mar '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |2690 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 2690] Security Vulnerability Gives me Administrative Access
by bugzilla-daemon＠bugs.koha-community.org 19 Mar '12

19 Mar '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2690 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Depends on| |3652 Resolution|--- |WONTFIX --- Comment #2 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- I am marking this WONTFIX, because it seems we don't have enough information to reproduce the bug and there is another open bug about XSS vulnerabilities (bug 3652). Please change status if you think it's not a good idea. -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 1662] Is there a difference between Full and Simplified for Serials History
by bugzilla-daemon＠bugs.koha-community.org 19 Mar '12

19 Mar '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=1662 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |katrin.fischer(a)bsz-bw.de Severity|critical |normal --- Comment #1 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- I think this needs some investigation about which sysprefs are still available and which views we have now. Lowering severity. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 19 Mar '12

19 Mar '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |katrin.fischer(a)bsz-bw.de --- Comment #14 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- What is the current status on this? Do we still have XSS vulnerabilities? -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 5604] New: additional icons for the Seshat set
by bugzilla-daemon＠bugs.koha-community.org 18 Mar '12

18 Mar '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5604 Summary: additional icons for the Seshat set Change sponsored?: --- Product: Koha Version: HEAD Platform: All OS/Version: All Status: ASSIGNED Severity: enhancement Priority: P5 Component: Templates AssignedTo: nengard(a)gmail.com ReportedBy: nengard(a)gmail.com QAContact: koha-bugs(a)lists.koha-community.org CC: ian.walls(a)bywatersolutions.com Estimated Hours: 0.0 The Seshat set by Naropa is missing some icons. These will be submitted in a few patches. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 21

[Bug 7076] New: shelfpage renders OPAC XSLT bloc for intranet Lists
by bugzilla-daemon＠bugs.koha-community.org 18 Mar '12

18 Mar '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7076 Bug #: 7076 Summary: shelfpage renders OPAC XSLT bloc for intranet Lists Classification: Unclassified Change sponsored?: --- Product: Koha Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Architecture, internals, and plumbing AssignedTo: ian.walls(a)bywatersolutions.com ReportedBy: ian.walls(a)bywatersolutions.com QAContact: koha-bugs(a)lists.koha-community.org The work from bug 5830 causes staff client lists to also undergo XSLT transformation if OPACXSLTResultsDisplay is enabled. The resulting value is not used anywhere on the staff side, thus wasting around half a second of computation time (or default page-sized lists). Adding a check for whether this is OPAC or intranet would give a performance boost to staff client lists. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 10

[Bug 6460] New: No log generated if Action set to All or Modify or Delete
by bugzilla-daemon＠bugs.koha-community.org 18 Mar '12

18 Mar '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6460 Bug #: 6460 Summary: No log generated if Action set to All or Modify or Delete Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Transaction logs AssignedTo: paul.poulain(a)biblibre.com ReportedBy: januszop(a)gmail.com QAContact: koha-bugs(a)lists.koha-community.org In "Browse system logs" dialogue, if Action is set to All or Modify or Delete, no logs are generated, despite of other settings. This is due to modifications introduced to sub C4::GetLogs and to tools::viewlog by the patch to Bug 6014. 1) Actions are logged as MODIFY, DELETE etc., whereas template viewlog.t* uses mod, del and passes it to viewlog.pl. That is why, consequently, wildcards (%) was used in GetLogs for action (prior to patch 6014). This has to be restored. 2) Also, @action is, after changes made by 6014, a one element list, even if the first and only element is an empty string ("") for All (actions). That is why, in GetLogs, one has to check if the first element of the list is not "" instead of checking the length of the list (which is always 1). A patch will follow. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 21

[Bug 6342] New: Help link doesn't popup anymore contextual help page
by bugzilla-daemon＠bugs.koha-community.org 18 Mar '12

18 Mar '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6342 Bug #: 6342 Summary: Help link doesn't popup anymore contextual help page Classification: Unclassified Change sponsored?: --- Product: Koha Version: rel_3_4 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Staff Client AssignedTo: paul.poulain(a)biblibre.com ReportedBy: frederic(a)tamil.fr QAContact: koha-bugs(a)lists.koha-community.org CC: gmcharlt(a)gmail.com Click on the top right corner ? link. The contextual help page doesn't popup. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 9

[Bug 5382] New: There is a switch statement in opac-detail.pl which adds an unwanted dependency on perl 5.10.1
by bugzilla-daemon＠bugs.koha-community.org 18 Mar '12

18 Mar '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5382 Summary: There is a switch statement in opac-detail.pl which adds an unwanted dependency on perl 5.10.1 Change sponsored?: --- Product: Koha Version: rel_3_4 Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: OPAC AssignedTo: oleonard(a)myacpl.org ReportedBy: chris(a)bigballofwax.co.nz QAContact: koha-bugs(a)lists.koha-community.org Estimated Hours: 0.0 Commit 92e204713b60a8211b110275104097787326485e Introduced a switch statement which is breaking opac-detail.pl. This needs to be changed to an if construct. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 3

[Bug 7429] New: CircAutoPrintQuickSlip description has a typo
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '12

17 Mar '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7429 Bug #: 7429 Summary: CircAutoPrintQuickSlip description has a typo Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All OS/Version: All Status: ASSIGNED Severity: normal Priority: P5 - low Component: Templates AssignedTo: nengard(a)gmail.com ReportedBy: nengard(a)gmail.com QAContact: ian.walls(a)bywatersolutions.com the preference says: "When an empty an empty barcode field is submitted in circulation" it should only have 'an empty' once. patch coming -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 7