April 2022 - Koha-bugs - lists.koha-community.org

[Bug 17720] New: CSRF token is not generated correctly
by bugzilla-daemon＠bugs.koha-community.org 11 Apr '22

11 Apr '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17720 Bug ID: 17720 Summary: CSRF token is not generated correctly Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: ASSIGNED Severity: blocker Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: jonathan.druart(a)bugs.koha-community.org Reporter: jonathan.druart(a)bugs.koha-community.org QA Contact: testopia(a)bugs.koha-community.org The CSRF token is not generated correctly if the DB password contain unicode characters. Indeed md5_base64 explodes with Wide character in subroutine entry at /usr/share/perl5/Digest/HMAC.pm line 63. -- You are receiving this mail because: You are watching all bug changes.

1 13

[Bug 17830] New: CSRF token is not generated correctly (bis)
by bugzilla-daemon＠bugs.koha-community.org 11 Apr '22

11 Apr '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17830 Bug ID: 17830 Summary: CSRF token is not generated correctly (bis) Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: ASSIGNED Severity: blocker Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: jonathan.druart(a)bugs.koha-community.org Reporter: jonathan.druart(a)bugs.koha-community.org QA Contact: testopia(a)bugs.koha-community.org The same error as bug 17720 can occur if the userid has unicode characters. Wide character in subroutine entry at /usr/share/perl5/Digest/HMAC.pm line 63. -- You are receiving this mail because: You are watching all bug changes.

1 15

[Bug 17096] [OMNIBUS] CSRF protections
by bugzilla-daemon＠bugs.koha-community.org 11 Apr '22

11 Apr '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17096 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |dcook(a)prosentient.com.au Resolution|--- |DUPLICATE --- Comment #2 from David Cook <dcook(a)prosentient.com.au> --- *** This bug has been marked as a duplicate of bug 22990 *** -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 27801] New: Entering multiple lines of an item in Point of Sale can make the Collect Payment field off
by bugzilla-daemon＠bugs.koha-community.org 10 Apr '22

10 Apr '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27801 Bug ID: 27801 Summary: Entering multiple lines of an item in Point of Sale can make the Collect Payment field off Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Fines and fees Assignee: koha-bugs(a)lists.koha-community.org Reporter: kelly(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org When a POS transaction occurs and multiple items are being added to the Sale box, say for example 9 x .10 items. The total in the This Sale box appears correct, but down below the amount to Collect from Patron is off by a cent. To Recreate: 1. Have an item to sell for .10 in the POS module 2. Add this item to the "Sale" 9 times- do not use the Quantity option- manually click add item 9x. 3. Under the This Sale, it totals up to .90 4. Under the Collect Payment box, the total is .89 -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 29

[Bug 14250] Can generate discharge for patrons with fines
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '22

09 Apr '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14250 nikkom(a)devinimeurope.com changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|koha-bugs(a)lists.koha-commun |nikkom(a)devinimeurope.com |ity.org | -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 14250] Can generate discharge for patrons with fines
by bugzilla-daemon＠bugs.koha-community.org 09 Apr '22

09 Apr '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14250 nikkom(a)devinimeurope.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |nikkom(a)devinimeurope.com -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 30395] New: Internal server error at reserve/request.pl on a biblio with non-ISO formatted date in publicationyear
by bugzilla-daemon＠bugs.koha-community.org 08 Apr '22

08 Apr '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30395 Bug ID: 30395 Summary: Internal server error at reserve/request.pl on a biblio with non-ISO formatted date in publicationyear Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Hold requests Assignee: koha-bugs(a)lists.koha-community.org Reporter: julian.maurice(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Steps to reproduce: 1. Verify that in the default MARC framework there is a field linked to biblioitems.publicationyear (typically it's 210$d for UNIMARC) 2. Create a biblio with a non ISO-formatted date in this field. It can be a "YYYY" year for instance. Create an item for this biblio. 3. Try to place a hold on this biblio. You should get an internal server error and the following message in the logs: Template process failed: undef error - The given date (2013) does not match the date format (iso) at /home/koha/src/Koha/DateUtils.pm line 204. It looks like the problem was introduced by bug 29660 which replaces an 'html' filter by a '$KohaDates' filter for publicationyear -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 11

[Bug 30408] New: API and OpenAPI versions should be string in spec
by bugzilla-daemon＠bugs.koha-community.org 08 Apr '22

08 Apr '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30408 Bug ID: 30408 Summary: API and OpenAPI versions should be string in spec Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com CC: tomascohen(a)gmail.com Bug 30194 made use of a script to sort the main swagger file, and versions got translated into integers, incorrectly. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 10

[Bug 30377] New: Fix two CGI::param called in list context-warnings
by bugzilla-daemon＠bugs.koha-community.org 08 Apr '22

08 Apr '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30377 Bug ID: 30377 Summary: Fix two CGI::param called in list context-warnings Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: m.de.rooy(a)rijksmuseum.nl QA Contact: testopia(a)bugs.koha-community.org [WARN] CGI::param called in list context from /usr/share/koha/serials/claims.pl line 65, this can lead to vulnerabilities. See the warning in "Fetching the value or values of a single named parameter" at /usr/share/perl5/CGI.pm line 412. [WARN] CGI::param called in list context from /usr/share/koha/opac/opac-search-history.pl line 108, this can lead to vulnerabilities. See the warning in "Fetching the value or values of a single named parameter" at /usr/share/perl5/CGI.pm line 412. Line numbers refer to a Koha 20.11 version. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 9

[Bug 22038] New: When exporting account table to excel, decimal is lost
by bugzilla-daemon＠bugs.koha-community.org 08 Apr '22

08 Apr '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22038 Bug ID: 22038 Summary: When exporting account table to excel, decimal is lost Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Fines and fees Assignee: koha-bugs(a)lists.koha-community.org Reporter: caroline.cyr-la-rose(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org Target Milestone: --- When you want to export a patron's account lines in Excel, the decimals are lost. So instead of having a fine of 3,75, the Excel file says the fine is 375. Note that I opened the Excel file in LibreOffice Calc. I'm not sure if that affects anything. Although I also opened the file in vim and got the same result: <c r="D2" s="63"><v>375</v></c><c r="E2" s="63"><v>375</v></c> To reproduce: 1) Find a patron with small fines (my patron had 3,75) or create some manual charges 2) In the patrons file, go to the Fines tab and then the Account tab 3) At the top of the account table, click on Excel 4) Open the file 5) Notice the fines are now multiplied by 100 -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 25