- Koha-bugs - lists.koha-community.org

[Bug 34478] Full CSRF protection
by bugzilla-daemon＠bugs.koha-community.org 22 May '24

22 May '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |36877 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36877 [Bug 36877] Patron card creator does not work when editing layout, profile or template -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36859] New: Batch checkout not working due to mismatch in CSRF parameter names
by bugzilla-daemon＠bugs.koha-community.org 22 May '24

22 May '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36859 Bug ID: 36859 Summary: Batch checkout not working due to mismatch in CSRF parameter names Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: kyle(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com A simple issue has broken batch checkouts completely. The script is looking for cud-checkout while the template form is passing cud-show. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 9

[Bug 36532] Any authenticated OPAC user can run opac-dismiss-message.pl for any user/any message
by bugzilla-daemon＠bugs.koha-community.org 22 May '24

22 May '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36532 --- Comment #14 from Fridolin Somers <fridolin.somers(a)biblibre.com> --- I've done a message to @fredericdemians in chat -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36532] Any authenticated OPAC user can run opac-dismiss-message.pl for any user/any message
by bugzilla-daemon＠bugs.koha-community.org 22 May '24

22 May '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36532 --- Comment #13 from Fridolin Somers <fridolin.somers(a)biblibre.com> --- Arg, I see it is in 22.11.x but depends on Bug 12029 only since 23.05 https://git.koha-community.org/Koha-community/Koha/commit/2278d229e899cd279… -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36532] Any authenticated OPAC user can run opac-dismiss-message.pl for any user/any message
by bugzilla-daemon＠bugs.koha-community.org 22 May '24

22 May '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36532 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to stable |Pushed to oldstable -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36532] Any authenticated OPAC user can run opac-dismiss-message.pl for any user/any message
by bugzilla-daemon＠bugs.koha-community.org 22 May '24

22 May '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36532 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)|24.05.00,23.11.05 |24.05.00,23.11.05,23.05.11 released in| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36532] Any authenticated OPAC user can run opac-dismiss-message.pl for any user/any message
by bugzilla-daemon＠bugs.koha-community.org 22 May '24

22 May '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36532 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |Pushed to stable Version(s)| |24.05.00,23.11.05 released in| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36382] XSS in showLastPatron dropdown
by bugzilla-daemon＠bugs.koha-community.org 22 May '24

22 May '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36382 --- Comment #21 from Fridolin Somers <fridolin.somers(a)biblibre.com> --- Bug 21246 since 23.11 so no backport to older branches -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36382] XSS in showLastPatron dropdown
by bugzilla-daemon＠bugs.koha-community.org 22 May '24

22 May '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36382 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |Pushed to stable Version(s)| |24.05.00,23.11.05 released in| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 19613] Scrub borrowers fields: borrowernotes opacnote
by bugzilla-daemon＠bugs.koha-community.org 22 May '24

22 May '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19613 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to oldoldstable |Pushed to oldoldoldstable -- You are receiving this mail because: You are watching all bug changes.

1 0