February 2014 - Koha-bugs - lists.koha-community.org

[Bug 11419] New: z39.50 searches not displaying errors
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11419 Bug ID: 11419 Summary: z39.50 searches not displaying errors Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Z39.50 / SRU / OpenSearch Servers Assignee: gmcharlt(a)gmail.com Reporter: kyle(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl When a z39.50 server isn't able to be searched successfully, the yellow error box comes up empty. -- You are receiving this mail because: You are watching all bug changes.

1 13

[Bug 11146] New: Show a go back link on no permission page
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11146 Bug ID: 11146 Summary: Show a go back link on no permission page Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Authentication Assignee: gmcharlt(a)gmail.com Reporter: fridolyn.somers(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org When a user has not the permission for a page or module, the authentication page is displayed with message : "Error: You do not have permission to access this page.". Most librarians uses the "previous page" button of there browser to come back on the page they where before trying to get to this non-permitted page. I propose to add a link to help comming back. -- You are receiving this mail because: You are watching all bug changes.

1 15

[Bug 6435] New: False "no items" in search results [intranet]
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6435 Bug #: 6435 Summary: False "no items" in search results [intranet] Classification: Unclassified Change sponsored?: --- Product: Koha Version: rel_3_4 Platform: All OS/Version: All Status: NEW Severity: major Priority: P5 Component: Cataloging AssignedTo: gmcharlt(a)gmail.com ReportedBy: eb(a)efdss.org QAContact: koha-bugs(a)lists.koha-community.org CC: ian.walls(a)bywatersolutions.com This applies only to things catalogued since upgrading to 3.4 The search results for these new records show no items in the hit list. But if you click on the title to bring up the normal view, the items are there, and are fully functional. The OPAC seems unaffected. The records created before we moved to 3.4 are also unaffected. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 72

[Bug 11666] admin/import_export_framework.pl allows execution of arbitrary SQL without authentication
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11666 Galen Charlton <gmcharlt(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to Master |Pushed to Stable --- Comment #13 from Galen Charlton <gmcharlt(a)gmail.com> --- Included in the following releases: 3.8.23, 3.10.13, 3.12.10, and 3.14.3. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11662] member-picupload.pl can write to arbitrary files on the server
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11662 Galen Charlton <gmcharlt(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to Master |Pushed to Stable --- Comment #5 from Galen Charlton <gmcharlt(a)gmail.com> --- Included in the following releases: 3.8.23, 3.10.13, 3.12.10, and 3.14.3. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11661] edithelp.pl can be used to write arbitrary files to the server
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11661 Galen Charlton <gmcharlt(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to Master |Pushed to Stable --- Comment #9 from Galen Charlton <gmcharlt(a)gmail.com> --- Included in the following releases: 3.8.23, 3.10.13, 3.12.10, and 3.14.3. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11660] tools/pdfViewer.pl is vulnerable to displaying the contents of an arbitrary file on the server
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11660 Galen Charlton <gmcharlt(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to Master |Pushed to Stable --- Comment #5 from Galen Charlton <gmcharlt(a)gmail.com> --- Included in the following releases: 3.8.23, 3.10.13, 3.12.10, and 3.14.3. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11666] admin/import_export_framework.pl allows execution of arbitrary SQL without authentication
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11666 Galen Charlton <gmcharlt(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to Master --- Comment #12 from Galen Charlton <gmcharlt(a)gmail.com> --- Pushed to master. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11666] admin/import_export_framework.pl allows execution of arbitrary SQL without authentication
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

1 0

[Bug 11662] member-picupload.pl can write to arbitrary files on the server
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11662 Galen Charlton <gmcharlt(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to Master --- Comment #4 from Galen Charlton <gmcharlt(a)gmail.com> --- Pushed to master. -- You are receiving this mail because: You are watching all bug changes.

1 0