July 2012 - Koha-bugs - lists.koha-community.org

[Bug 3280] opac/opac-sendbasket.pl security leaky
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '12

02 Jul '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280 M. de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |Passed QA --- Comment #25 from M. de Rooy <m.de.rooy(a)rijksmuseum.nl> --- (In reply to comment #24) > Setting this to Signed off to get Paul's attention :-) Passed QA may even be a better idea.. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3280] opac/opac-sendbasket.pl security leaky
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '12

02 Jul '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280 --- Comment #24 from M. de Rooy <m.de.rooy(a)rijksmuseum.nl> --- Setting this to Signed off to get Paul's attention :-) -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3280] opac/opac-sendbasket.pl security leaky
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '12

02 Jul '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280 M. de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs Signoff |Signed Off -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3280] opac/opac-sendbasket.pl security leaky
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '12

02 Jul '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280 M. de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3280] opac/opac-sendbasket.pl security leaky
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '12

02 Jul '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280 M. de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to Master |ASSIGNED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3280] opac/opac-sendbasket.pl security leaky
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '12

02 Jul '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280 --- Comment #23 from M. de Rooy <m.de.rooy(a)rijksmuseum.nl> --- Created attachment 10595 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=10595&action=edit Followup for privacy issue Paul: Katrin raised the question on privacy issue on x-orig-ip. Since we did not have it for years, i would suggest to remove it now first. And come up with a solution for all parties later on. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3280] opac/opac-sendbasket.pl security leaky
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '12

02 Jul '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280 --- Comment #22 from Paul Poulain <paul.poulain(a)biblibre.com> --- (In reply to comment #21) > (In reply to comment #20) > > Ok, rereading through the bug report there is a bit that worries me: > > - add field X-Orig-IP with IP of sender > > > > IP addresses in web server logs have been issue of data privacy here - I > > wonder if it's ok adding the IP to the mail? > > Would not worry about that too much. Could be lots of ip addresses in the > mail headers showing the route of this message from A to B. +1, ans I suspect that, in France, it's legally requested to track this kind of things = the mail is sent by someone, the server admin must be able to answer any legal/court request -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3280] opac/opac-sendbasket.pl security leaky
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '12

02 Jul '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280 --- Comment #21 from M. de Rooy <m.de.rooy(a)rijksmuseum.nl> --- (In reply to comment #20) > Ok, rereading through the bug report there is a bit that worries me: > - add field X-Orig-IP with IP of sender > > IP addresses in web server logs have been issue of data privacy here - I > wonder if it's ok adding the IP to the mail? Would not worry about that too much. Could be lots of ip addresses in the mail headers showing the route of this message from A to B. Moreover, measures against spammers here should not be considered as privacy intruding. You can find this ip address also in your access log; that is on your server not just in the mail header.. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3280] opac/opac-sendbasket.pl security leaky
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '12

02 Jul '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3280 --- Comment #20 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Ok, rereading through the bug report there is a bit that worries me: - add field X-Orig-IP with IP of sender IP addresses in web server logs have been issue of data privacy here - I wonder if it's ok adding the IP to the mail? -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 8341] New: MARC 952 field isn't being created or edited
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '12

02 Jul '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8341 Priority: P5 - low Change sponsored?: --- Bug ID: 8341 Assignee: gmcharlt(a)gmail.com Summary: MARC 952 field isn't being created or edited Severity: critical Classification: Unclassified OS: All Reporter: dcook(a)prosentient.com.au Hardware: All Status: NEW Version: master Component: Architecture, internals, and plumbing Product: Koha At first, we thought this might be an issue just with our install of 3.8, but BibLibre's sandbox #1 seems to have the same problem. When a new MARC record is created and items are added, no 952 field is created. Even when a MARC record has a 952 and items are changed, the 952 is unaffected. Any thoughts on this one? It doesn't readily show itself, but I imagine that it has quite wide-scale consequences... -- You are receiving this mail because: You are watching all bug changes.

1 1