- Koha-bugs - lists.koha-community.org

[Bug 38468] Staff interface detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38468 --- Comment #13 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- These patches have been included in all maintained versions, see "Version(s) released in". -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37727] CVE-2024-24337 - Fix CSV formula injection - client side (DataTables)
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37727 --- Comment #21 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- These patches have been included in all maintained versions, see "Version(s) released in". -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38470] Subscription detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38470 --- Comment #12 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- These patches have been included in all maintained versions, see "Version(s) released in". -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38470] Subscription detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38470 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|Pushed to main |RESOLVED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38468] Staff interface detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38468 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|Pushed to main |RESOLVED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37727] CVE-2024-24337 - Fix CSV formula injection - client side (DataTables)
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37727 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|Pushed to stable |RESOLVED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37727] CVE-2024-24337 - Fix CSV formula injection - client side (DataTables)
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37727 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |Pushed to stable -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 8425] Autobarcode generates duplicate barcodes with AcqCreateItems = on order
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8425 Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |martin.renvoize@ptfs-europe | |.com --- Comment #27 from Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> --- (In reply to Baptiste Wojtkowski (bwoj) from comment #25) > Unless we totally rewrite the code of the module, which will de facto > obsolete this patch, I do not know how we could solve this without that kind > of tweak, but I'm not sure it would increase the technical debt since it is > not more than a fixup to an existing debt and it simply improves the > possibility of existing obsolete code. Understand your point. Adding Martin for another QA point of view. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38916] New: koha custom create page link not working OPAC
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38916 Bug ID: 38916 Summary: koha custom create page link not working OPAC Change sponsored?: --- Product: Koha Version: 24.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: koha-bugs(a)lists.koha-community.org Reporter: lulapercg(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org I have installed Koha version 24.11. I try to add the OPAC About Us page using the Koha "Add Content Pages option. I create a page name about us that is visible in the staff interface but not in OPAC. it comes this An error has occurred! Error 404 This message may have been caused by any of the following reasons: You made use of an external link to an item that is no longer available You followed an outdated link e.g. from a search engine or a bookmark You tried to access a page that needs authentication An internal link in the client is broken and the page does not exist -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1

[Bug 38897] New: Error_Key is stored in legacy trusted.gpg keyring
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38897 Bug ID: 38897 Summary: Error_Key is stored in legacy trusted.gpg keyring Change sponsored?: --- Product: Koha Version: 24.05 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: bugs.koha-community.org Assignee: koha-bugs(a)lists.koha-community.org Reporter: ddvala9(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org I'm trying to update KOHA 24.05.05 to the latest version through the below command: sudo apt-get update but I'm receiving the below error: W: http://debian.koha-community.org/koha/dists/stable/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details. Please help. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3