May 2019 - Koha-bugs - lists.koha-community.org

[Bug 13937] Add an Elasticsearch-compatible Z39.50/SRU daemon that can inject item status MARC subfields
by bugzilla-daemon＠bugs.koha-community.org 01 May '19

01 May '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13937 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |release-notes-needed, | |rel_19_05_candidate -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 5770] Email librarian when purchase suggestion made
by bugzilla-daemon＠bugs.koha-community.org 01 May '19

01 May '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5770 --- Comment #29 from Martin Renvoize <martin.renvoize(a)ptfs-europe.com> --- Oops.. lets start that again. 1) I think we should allow for the feature to be disabled and so I'd like to see the syspref allow for that option - I'll work on a QA followup for that 2) We should perhaps take account of the reply-to handling built into branch addresses and admin email address - I can also look at doing a followup 3) I'm not a fan of us introducing the letter_code option to C4::Letter::GetMessagesQueue just for use in the tests - I'll do a followup for that too. Otherwise, I really like the feature so please bear with me whilst I code up the followups for QA -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 5770] Email librarian when purchase suggestion made
by bugzilla-daemon＠bugs.koha-community.org 01 May '19

01 May '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5770 Martin Renvoize <martin.renvoize(a)ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- QA Contact|josef.moravec(a)gmail.com |martin.renvoize@ptfs-europe | |.com CC| |martin.renvoize@ptfs-europe | |.com --- Comment #28 from Martin Renvoize <martin.renvoize(a)ptfs-europe.com> --- Couple of QA points here... not sure if Josef -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 15260] Option for extended loan with useDaysMode
by bugzilla-daemon＠bugs.koha-community.org 01 May '19

01 May '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15260 --- Comment #20 from Andrew Isherwood <andrew.isherwood(a)ptfs-europe.com> --- Great catch Liz, thanks! That was a nasty one! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 15260] Option for extended loan with useDaysMode
by bugzilla-daemon＠bugs.koha-community.org 01 May '19

01 May '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15260 --- Comment #19 from Andrew Isherwood <andrew.isherwood(a)ptfs-europe.com> --- Created attachment 89178 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=89178&action=ed… Bug 15260: (follow-up) Fix bug in subtraction prev_open_days can receive either positive or negative numbers and then does the right thing with them. However, we weren't also doing this with the number it receives back from get_push_amt -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 15260] Option for extended loan with useDaysMode
by bugzilla-daemon＠bugs.koha-community.org 01 May '19

01 May '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15260 Andrew Isherwood <andrew.isherwood(a)ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Failed QA |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11529] Add subtitle, medium and part fields to biblio table
by bugzilla-daemon＠bugs.koha-community.org 01 May '19

01 May '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11529 --- Comment #186 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Patches apply, QA tests pass... more later. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11529] Add subtitle, medium and part fields to biblio table
by bugzilla-daemon＠bugs.koha-community.org 01 May '19

01 May '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11529 --- Comment #185 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Embarking on my testing journey here... wish me luck! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 22268] New: Data displayed in request list datatable is not sanitized
by bugzilla-daemon＠bugs.koha-community.org 01 May '19

01 May '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22268 Bug ID: 22268 Summary: Data displayed in request list datatable is not sanitized Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: ILL Assignee: koha-bugs(a)lists.koha-community.org Reporter: andrew.isherwood(a)ptfs-europe.com Target Milestone: --- Request data displayed in the "Request view" or similar views is sanitized by the html filter in the template. However, the main request list table is generated via Datatables and is not sanitized. This can be demonstrated by entering a malicious string, such as: <script>alert('pwned');</script> Into the request notes field, then displaying the requests table. I've not yet investigated if column data that is generated via render functions is affected, or whether it's just the columns that are passed through by Datatables. Investigate how this has been addressed elsewhere in Koha. Also, possible mitigations can be seen here: https://datatables.net/manual/security -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 8