June 2012 - Koha-bugs - lists.koha-community.org

[Bug 3280] opac/opac-sendbasket.pl security leaky
by bugzilla-daemon＠bugs.koha-community.org 09 Jun '12

09 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280 Kyle M Hall <kyle.m.hall(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Patch doesn't apply |Needs Signoff CC| |kyle.m.hall(a)gmail.com -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 3280] opac/opac-sendbasket.pl security leaky
by bugzilla-daemon＠bugs.koha-community.org 09 Jun '12

09 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280 Kyle M Hall <kyle.m.hall(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #6576|0 |1 is obsolete| | --- Comment #4 from Kyle M Hall <kyle.m.hall(a)gmail.com> --- Created attachment 10027 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=10027&action=edit Bug 3280 Restrict Send basket feature In order to prevent spamming using sendbasket.pl, some counter-measure are done: - permit send basket only for authenticated user - permit send basket only if basket contains items - use username & email for 'To' field (with fallback to KohaAdminEmailAddress) - add field X-Orig-IP with IP of sender - add field X-Abuse-Report with KohaAdminEmailAddress -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 3701] If the ReturnToShelvingCart syspref is on, and something needs to go in transit, the shelving cart setting is overriding the transit.
by bugzilla-daemon＠bugs.koha-community.org 09 Jun '12

09 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3701 Kyle M Hall <kyle.m.hall(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Patch doesn't apply |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3701] If the ReturnToShelvingCart syspref is on, and something needs to go in transit, the shelving cart setting is overriding the transit.
by bugzilla-daemon＠bugs.koha-community.org 09 Jun '12

09 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3701 Kyle M Hall <kyle.m.hall(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #1524|0 |1 is obsolete| | --- Comment #1 from Kyle M Hall <kyle.m.hall(a)gmail.com> --- Created attachment 10026 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=10026&action=edit BugFix - ReturnToShelvingCart If the ReturnToShelvingCart syspref is on, and something needs to go in transit, the shelving cart setting is overriding the transit. What seems to be happening is this: * Item is checked in, and flagged as needing to go in transit from A to B. * Item is immediately flagged as shelving cart, though. Current display says both shelving cart and in transit. * After the cart-to-shelf script runs, item comes out of transit and shows as being available at the destination library, although it hasn't arrived yet and no one has manually checked it in. It looks like the "checkin" from the script is telling Koha that the in-transit has been received. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 4460] Amazon's AssociateID tag not used in links so referred revenue lost
by bugzilla-daemon＠bugs.koha-community.org 09 Jun '12

09 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4460 Kyle M Hall <kyle.m.hall(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Patch doesn't apply |Needs Signoff CC| |kyle.m.hall(a)gmail.com -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 4460] Amazon's AssociateID tag not used in links so referred revenue lost
by bugzilla-daemon＠bugs.koha-community.org 09 Jun '12

09 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4460 Kyle M Hall <kyle.m.hall(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #2165|0 |1 is obsolete| | --- Comment #4 from Kyle M Hall <kyle.m.hall(a)gmail.com> --- Created attachment 10024 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=10024&action=edit Bug 4460 - Amazon's AssociateID tag not used in links so referred revenue lost Rewrite of patch authored by Reed Wade <reed(a)catalyst.net.nz> -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 5468] New: libyaz3 debian dependency
by bugzilla-daemon＠bugs.koha-community.org 09 Jun '12

09 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5468 Summary: libyaz3 debian dependency Change sponsored?: --- Product: Koha Version: rel_3_2 Platform: PC OS/Version: Linux Status: NEW Severity: minor Priority: P5 Component: Packaging AssignedTo: robin(a)catalyst.net.nz ReportedBy: k.andris(a)gmail.com QAContact: koha-bugs(a)lists.koha-community.org Estimated Hours: 0.0 The koha package depends on libyaz3, which depends on libicu42 which was removed from Debian Squeeze, so koha can't be installed. Could you use libyaz4? Or use it as an alternative? -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug.

1 23

[Bug 3708] Add another customizable region to the OPAC: right sidebar
by bugzilla-daemon＠bugs.koha-community.org 09 Jun '12

09 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3708 --- Comment #7 from Martin Renvoize <martin.renvoize(a)ptfs-europe.com> --- Thanks Paul, I'de just misread that checkbox in bugzilla.. oops. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 8196] New: members/memberentry.pl?op=add shows all extended attribute values from database
by bugzilla-daemon＠bugs.koha-community.org 09 Jun '12

09 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8196 Priority: P5 - low Change sponsored?: --- Bug ID: 8196 CC: gmcharlt(a)gmail.com Assignee: kyle.m.hall(a)gmail.com Summary: members/memberentry.pl?op=add shows all extended attribute values from database Severity: enhancement Classification: Unclassified OS: All Reporter: dpavlin(a)rot13.org Hardware: All Status: NEW Version: master Component: Patrons Product: Koha Adding new patrons with extended attributes shows all values from database as opposed to empty input boxes for attributes available. Bug 5742 changed code in C4/Members/Attributes.pm so that WHERE doesn't work correctly when used without borrowernumber (and it's undef when adding new patron) -- You are receiving this mail because: You are watching all bug changes.

1 9

[Bug 8176] New: $sqlwhere is undefined in C4::Serials in GetSubscriptions
by bugzilla-daemon＠bugs.koha-community.org 09 Jun '12

09 Jun '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8176 Priority: P5 - low Change sponsored?: --- Bug ID: 8176 Assignee: colin.campbell(a)ptfs-europe.com Summary: $sqlwhere is undefined in C4::Serials in GetSubscriptions Severity: normal Classification: Unclassified OS: All Reporter: mtompset(a)hotmail.com Hardware: All Status: NEW Version: rel_3_6 Component: Serials Product: Koha This is similar to 7105, but 7105 forgot to add one more line. Add this --> $sqlwhere = ( $sqlwhere ? $sqlwhere : "" ); Before this --> $sql .= "$sqlwhere ORDER BY title"; Around line 606 in C4::Serials. I'm looking at 3.6.3 This is what triggered my search: [Fri Jun 01 07:06:39 2012] [error] [client 192.168.100.2] [Fri Jun 1 07:06:39 2 012] serials-home.pl: Use of uninitialized value $sqlwhere in concatenation (.) or string at /usr/share/koha/lib/C4/Serials.pm line 606. -- You are receiving this mail because: You are watching all bug changes.

1 13