May 2012 - Koha-bugs - lists.koha-community.org

[Bug 8008] New: Typo in man page for koha-create
by bugzilla-daemon＠bugs.koha-community.org 14 Jun '12

14 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8008 Priority: P5 - low Change sponsored?: --- Bug ID: 8008 Assignee: magnus(a)enger.priv.no Summary: Typo in man page for koha-create QA Contact: koha.sekjal(a)gmail.com Severity: trivial Classification: Unclassified OS: All Reporter: magnus(a)enger.priv.no Hardware: All Status: NEW Version: master Component: Packaging Product: Koha On line 121, debian/docs/koha-create.xml has "/etc/koha/koha-site.conf" instead of "/etc/koha/koha-sites.conf". Spotted by "narcisgarcia" and reported on IRC. -- You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 7929] New: Duplicate id "availability" on XSLT result page
by bugzilla-daemon＠bugs.koha-community.org 14 Jun '12

14 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7929 Priority: P5 - low Change sponsored?: --- Bug ID: 7929 Assignee: oleonard(a)myacpl.org Summary: Duplicate id "availability" on XSLT result page QA Contact: koha.sekjal(a)gmail.com Severity: minor Classification: Unclassified OS: All Reporter: katrin.fischer(a)bsz-bw.de Hardware: All Status: NEW Version: master Component: OPAC Product: Koha On the result list the id "availability" gets replicated for each entry. ids have to be unique, should be a class instead. -- You are receiving this mail because: You are watching all bug changes.

1 13

[Bug 7987] New: Typo causing invalid markup in circulation.tt
by bugzilla-daemon＠bugs.koha-community.org 14 Jun '12

14 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7987 Priority: P5 - low Change sponsored?: --- Bug ID: 7987 Assignee: oleonard(a)myacpl.org Summary: Typo causing invalid markup in circulation.tt QA Contact: koha.sekjal(a)gmail.com Severity: minor Classification: Unclassified OS: All Reporter: colin.campbell(a)ptfs-europe.com Hardware: All Status: NEW Version: master Component: Templates Product: Koha The closing </li> of a list entry appears to have lost a character meaning the li is not properly closed -- You are receiving this mail because: You are watching all bug changes.

1 7

[Bug 8025] New: Patron attribute not selected if value is zero
by bugzilla-daemon＠bugs.koha-community.org 14 Jun '12

14 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8025 Priority: P5 - low Change sponsored?: --- Bug ID: 8025 CC: gmcharlt(a)gmail.com Assignee: adrien.saurat(a)biblibre.com Summary: Patron attribute not selected if value is zero Severity: enhancement Classification: Unclassified OS: All Reporter: adrien.saurat(a)biblibre.com Hardware: All Status: ASSIGNED Version: master Component: Patrons Product: Koha TEST PLAN 1) If it doesn't exist, create an authorised value "YES_NO" with the following values : value 0 for "NO" value 1 for "YES" 2) Create a patron attribute using this authorised value. 3) Edit a patron and setup this new attribute for him. If you select YES, that's fine. If you select NO, it seems ok at first after validation, but if you come back on the editing page, the select box won't have its "selected" status on the "NO" option. Instead, the default empty line is selected. If you don't notice this and leave everything as it is, you'll reset your attribute. -- You are receiving this mail because: You are watching all bug changes.

1 9

[Bug 8171] New: Improper escaping of quotes during z39.50 queries leads to potential malicious code execution
by bugzilla-daemon＠bugs.koha-community.org 14 Jun '12

14 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8171 Priority: P5 - low Change sponsored?: --- Bug ID: 8171 Assignee: gmcharlt(a)gmail.com Summary: Improper escaping of quotes during z39.50 queries leads to potential malicious code execution Severity: normal Classification: Unclassified OS: Linux Reporter: bhurley(a)aihs.org Hardware: PC Status: NEW Version: rel_3_8 Component: Z39.50 / SRU / OpenSearch Servers Product: Koha When using Koha v. 3.8 for z39.50 based copy cataloging, if the title being searched for contains quotes, then everything after the first set of quotation marks is not transferred to the z39.50 search. For example the title The Irish "Americans" only shows up as The Irish in the z39.50 search pop up window. My understanding is that improper escaping of quotes can cause sql injection attacks, although this would require the malicious coder to be in the staff area (intranet) to conduct such an attack. It also leads to incorrect z39.50 search results, if one is unaware of the problem. I believe the problem is in the C4::Z3950 perl module. The $term variable doesn't ignore the quotes which may legitimately be in the string. I believe the error is on line 228 of the c4::Z3950 module, my version (3.8) of which reads 228 $sth=$dbh->prepare("insert into z3950queue (term,type,servers, identifier) values (?, ?, ?, ?)"); I think it should read 228 $sth=$dbh->prepare("insert into z3950queue (q{term},type,servers, identifier) values (?, ?, ?, ?)"); If there is anything I can do to further this process, or if you believe my report is in error, please let me know. Keep up the good work. -- You are receiving this mail because: You are watching all bug changes.

1 22

[Bug 8166] New: Adding New Currencies & Exchange rates
by bugzilla-daemon＠bugs.koha-community.org 14 Jun '12

14 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8166 Priority: P5 - low Change sponsored?: --- Bug ID: 8166 Assignee: henridamien(a)koha-fr.org Summary: Adding New Currencies & Exchange rates Severity: enhancement Classification: Unclassified OS: All Reporter: amit.gupta(a)osslabs.biz Hardware: All Status: NEW Version: master Component: Acquisitions Product: Koha While adding new currencies & exchange rates if we not fill any field for ex: currency, rate etc One dialog is coming and say Form not submitted because of the following problem(s) ------------------------------------------------------------------------------------ - Currency name missing - Rate missing - Symbol missing if we click OK it save a blank record with exchange rate 0. -- You are receiving this mail because: You are watching all bug changes.

1 11

[Bug 7815] New: Order pickup library list by name rather than by code
by bugzilla-daemon＠bugs.koha-community.org 14 Jun '12

14 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7815 Priority: P5 - low Change sponsored?: --- Bug ID: 7815 CC: gmcharlt(a)gmail.com Assignee: koha.sekjal(a)gmail.com Summary: Order pickup library list by name rather than by code QA Contact: koha.sekjal(a)gmail.com Severity: enhancement Classification: Unclassified OS: All Reporter: sophie.meynieux(a)biblibre.com Hardware: All Status: NEW Version: master Component: Hold requests Product: Koha When you want to place a hold on a document (reserve/request.pl), pickup library shows a list of Libraries order by code rather than by name. This patch reorder this list -- You are receiving this mail because: You are watching all bug changes.

1 7

[Bug 5312] New: XHTML correction in authority summary
by bugzilla-daemon＠bugs.koha-community.org 13 Jun '12

13 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5312 Summary: XHTML correction in authority summary Change sponsored?: --- Product: Koha Version: rel_3_2 Platform: All OS/Version: All Status: NEW Severity: minor Priority: P5 Component: Staff Client AssignedTo: paul.poulain(a)biblibre.com ReportedBy: fridolyn.somers(a)gmail.com QAContact: koha-bugs(a)lists.koha-community.org CC: gmcharlt(a)gmail.com Estimated Hours: 0.0 When an authority summary contains a "\n",it is replaced by a HTML's "<br>". XHTML new line is "<br \>". -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 12

[Bug 6175] New: Mismatch between marc_subfield_structure and authorised_values tables
by bugzilla-daemon＠bugs.koha-community.org 12 Jun '12

12 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6175 Bug #: 6175 Summary: Mismatch between marc_subfield_structure and authorised_values tables Classification: Unclassified Change sponsored?: --- Product: Koha Version: rel_3_6 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Database AssignedTo: gmcharlt(a)gmail.com ReportedBy: conan(a)lugmen.org.ar QAContact: koha-bugs(a)lists.koha-community.org kohastructure.sql defines: marc_subfield_structure.authorised_value varchar(20) default NULL this column points to: authorised_values.category varchar(10) NOT NULL default '' Quick fix is straightforward: modify marc_subfield_structure to match authorised_values definition. However there's been a request to expand size for category column (http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5458) Also there is discussion to make all references to authorised_values.category foreign key references on koha-dev list. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 9

[Bug 8101] New: DataTables in Acquisision module: orderreceive.tt
by bugzilla-daemon＠bugs.koha-community.org 12 Jun '12

12 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8101 Priority: P5 - low Change sponsored?: --- Bug ID: 8101 Assignee: henridamien(a)koha-fr.org Summary: DataTables in Acquisision module: orderreceive.tt Severity: enhancement Classification: Unclassified OS: All Reporter: jonathan.druart(a)biblibre.com Hardware: All Status: NEW Version: unspecified Component: Acquisitions Product: Koha DataTables in Acquisision module: orderreceive.tt -- You are receiving this mail because: You are watching all bug changes.

1 10