August 2017 - Koha-bugs - lists.koha-community.org

[Bug 19041] New: footerjs = 1 removed by bug 17855
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19041 Bug ID: 19041 Summary: footerjs = 1 removed by bug 17855 Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: jonathan.druart(a)bugs.koha-community.org QA Contact: testopia(a)bugs.koha-community.org Depends on: 17855 From commit 0492fcf87f170846d1e6c8683916a56cb67ce9a7 Bug 17855: Onboarding tool +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/intranet-main.tt @@ -1,5 +1,3 @@ -[% USE Koha %] -[% SET footerjs = 1 %] +[% USE Koha %] has been re-added by commit 151cdcd133d8618a3faf9b47723d66ac3dc71b4e Bug 18673: News author does not display on staff client home page But not the footerjs = 1 Reading the code I guess we lost the confirmation message when deleting a news item. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17855 [Bug 17855] New onboarding tool feature to guide users through setting up Koha, and minor web installer UI improvements -- You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 10603] required fields in the courses table should be not null
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10603 Nicki S <nschermann(a)millbrook.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |nschermann(a)millbrook.org --- Comment #1 from Nicki S <nschermann(a)millbrook.org> --- My school doesn't use course numbers! It would be amazing if you could make this field optional. Course name should be the only required field. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 14803] Rental and fine fees are not updating on circulation screen
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14803 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs Signoff |Patch doesn't apply CC| |katrin.fischer(a)bsz-bw.de --- Comment #33 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Sorry, can't test, the third patch doesn't apply: Applying: Bugfix: added missing use Koha::Account Applying: bug 14803: KOHA.Checkouts js object fatal: sha1 information is lacking or useless (koha-tmpl/intranet-tmpl/prog/js/checkouts.js). error: could not build fake ancestor Patch failed at 0001 bug 14803: KOHA.Checkouts js object The copy of the patch that failed is found in: .git/rebase-apply/patch When you have resolved this problem run "git bz apply --continue". If you would prefer to skip this patch, instead run "git bz apply --skip". To restore the original branch and stop patching run "git bz apply --abort". Patch left in /tmp/bug-14803-KOHACheckouts-js-object-hfCTB4.patch -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13374] AllowHoldsOnPatronsPossessions not working
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13374 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jonathan.druart(a)bugs.koha-c | |ommunity.org --- Comment #7 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- I am not sure the patch fixes what has been reported originally. This patch fixes a problem added by commit bc39f0392bbebaad4c083f81308f652a325be042 Bug 14695 - Add ability to place multiple item holds on a given record per patron Which has been opened and pushed after this bug has been reported. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 6934] New report Cash Register Statistics
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6934 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |19061 -- You are receiving this mail because: You are watching all bug changes. You are the QA Contact for the bug.

1 0

[Bug 19061] New: sql injection vulnerability in cash_register_stats.pl
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19061 Bug ID: 19061 Summary: sql injection vulnerability in cash_register_stats.pl Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Reports Assignee: koha-bugs(a)lists.koha-community.org Reporter: colin.campbell(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org two parameters are embedded in the sql statement executed by this report, so that sending a single quote as the value for branch generates a return of a mysql error. Parameters should always be passed via placeholders in the statement and as parameters to the exec call. While not a major vulnerability this will be picked up by penetration testing scripts -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 18653] Possible privacy breach with OPAC password recovery
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

1 0

[Bug 18854] DoS Offset
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

1 0

[Bug 18124] CSRF tokens must be limited to user's session
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

1 0

[Bug 17900] Possible SQL injection in patroncards template editing
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

1 0