August 2017 - Koha-bugs - lists.koha-community.org

[Bug 19035] Stored XSS in patron lists - lists.pl
by bugzilla-daemon＠bugs.koha-community.org 29 Aug '17

29 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19035 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Koha |Architecture, internals, | |and plumbing Status|Passed QA |Pushed to Master Group|Koha security | Product|Koha security |Koha --- Comment #4 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Pushed to master for 17.11, thanks to everybody involved! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 19033] XSS Flaws in Currencies and exchange page
by bugzilla-daemon＠bugs.koha-community.org 29 Aug '17

29 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19033 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Koha |Architecture, internals, | |and plumbing Status|Passed QA |Pushed to Master Product|Koha security |Koha Group|Koha security | --- Comment #4 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Pushed to master for 17.11, thanks to everybody involved! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 18726] OPAC XSS - biblionumber
by bugzilla-daemon＠bugs.koha-community.org 29 Aug '17

29 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18726 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Product|Koha security |Koha Group|Koha security | Status|Passed QA |Pushed to Master Component|Koha |Architecture, internals, | |and plumbing --- Comment #5 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Pushed to master for 17.11, thanks to everybody involved! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12598] New misc/import_borrowers.pl command line tool
by bugzilla-daemon＠bugs.koha-community.org 29 Aug '17

29 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12598 --- Comment #161 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- (In reply to Colin Campbell from comment #151) > The recently applied to master patch > > Bug 17829: (follow-up) Fix import patron > > needs to be reverted inorder for the first of these patch to still apply First patch has been rebased to fix this conflict. (In reply to Colin Campbell from comment #152) > Koha/Patrons/Import.pm > > Should have a 'use Koha::Patron::Debarments;' to avoid runtime errors with > undefined subroutine GetDebarments called Fixed in the last patch. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12598] New misc/import_borrowers.pl command line tool
by bugzilla-daemon＠bugs.koha-community.org 29 Aug '17

29 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12598 --- Comment #160 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Created attachment 66582 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=66582&action=ed… Bug 12598: Add use Koha::Patron::debarments statement -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12598] New misc/import_borrowers.pl command line tool
by bugzilla-daemon＠bugs.koha-community.org 29 Aug '17

29 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12598 --- Comment #159 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Created attachment 66581 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=66581&action=ed… Bug 12598: Re-add bug 18555: Create patron list from patron import -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12598] New misc/import_borrowers.pl command line tool
by bugzilla-daemon＠bugs.koha-community.org 29 Aug '17

29 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12598 --- Comment #158 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Created attachment 66580 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=66580&action=ed… Bug 12598 Allow matched patron to be updated When a test was introduced to not add duplicate userids it overlooked that if you were matching on userid you do not want the update to be rejected. Add a test to overcome this logical flaw if updating by matching userid -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12598] New misc/import_borrowers.pl command line tool
by bugzilla-daemon＠bugs.koha-community.org 29 Aug '17

29 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12598 --- Comment #157 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Created attachment 66579 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=66579&action=ed… Bug 12598: Re-add some missing stuffs This patch will have to be squashed with previous ones, but for readability I prefer to let it alone for now. It reintroduces 2 missing changes: commit fd123903651435c56ca14d88897e9ce4d7a38bb5 Bug 15010: Import patron tool creates 'duplicate' restrictions ( debarments ) commit 011d8e9855ffeb1779f5c1aadc9f4367c298cee7 Bug 12543 - Add userid as matchpoint for "Import patrons" tool Signed-off-by: Colin Campbell <colin.campbell(a)ptfs-europe.com> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12598] New misc/import_borrowers.pl command line tool
by bugzilla-daemon＠bugs.koha-community.org 29 Aug '17

29 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12598 --- Comment #156 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Created attachment 66578 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=66578&action=ed… Bug 12598: Fix conflict with 17829 - GetMember Signed-off-by: Colin Campbell <colin.campbell(a)ptfs-europe.com> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12598] New misc/import_borrowers.pl command line tool
by bugzilla-daemon＠bugs.koha-community.org 29 Aug '17

29 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12598 --- Comment #155 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Created attachment 66577 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=66577&action=ed… Bug 12598: Fix conflict with bug 16911 Tests will have to be written for this change Signed-off-by: Colin Campbell <colin.campbell(a)ptfs-europe.com> -- You are receiving this mail because: You are watching all bug changes.

1 0