- Koha-bugs - lists.koha-community.org

[Bug 29830] New: Superlibrarian unable to delete patron list
by bugzilla-daemon＠bugs.koha-community.org 22 Aug '24

22 Aug '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29830 Bug ID: 29830 Summary: Superlibrarian unable to delete patron list Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Lists Assignee: koha-bugs(a)lists.koha-community.org Reporter: jendayi30(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl I'm currently unable to delete patron lists that someone else has created even though I have superlibrarian privileges. I am able to delete patron lists that I originally created, but not patron lists that someone else has created. As superlibrarian, I should have the ability to delete all patron lists on our system, if needed. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 10

[Bug 37508] SQL reports should not show patron password hash if queried
by bugzilla-daemon＠bugs.koha-community.org 22 Aug '24

22 Aug '24

1 0

[Bug 37488] Filepaths not validated in ZIP upload to picture-upload.pl
by bugzilla-daemon＠bugs.koha-community.org 22 Aug '24

22 Aug '24

1 0

[Bug 37466] Reflected Cross Site Scripting
by bugzilla-daemon＠bugs.koha-community.org 22 Aug '24

22 Aug '24

1 0

[Bug 37464] Remote Code Execution in barcode function leads to reverse shell
by bugzilla-daemon＠bugs.koha-community.org 22 Aug '24

22 Aug '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37464 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Product|Koha security |Koha Version|unspecified |Main Group|Koha security | Component|Koha |Architecture, internals, | |and plumbing --- Comment #16 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- (In reply to Chris Cormack from comment #6) > https://github.com/mbeijen/GD-Barcode if we want to It was reported to the author of the GD::Barcode: https://github.com/mbeijen/GD-Barcode/issues/7 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37370] opac-export.pl can be used even if exporting disabled
by bugzilla-daemon＠bugs.koha-community.org 22 Aug '24

22 Aug '24

1 0

[Bug 37323] Remote-Code-Execution (RCE) in picture-upload.pl
by bugzilla-daemon＠bugs.koha-community.org 22 Aug '24

22 Aug '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37323 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to oldstable |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37323] Remote-Code-Execution (RCE) in picture-upload.pl
by bugzilla-daemon＠bugs.koha-community.org 22 Aug '24

22 Aug '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37323 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to stable |Pushed to oldstable -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37323] Remote-Code-Execution (RCE) in picture-upload.pl
by bugzilla-daemon＠bugs.koha-community.org 22 Aug '24

22 Aug '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37323 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |Pushed to stable -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37323] Remote-Code-Execution (RCE) in picture-upload.pl
by bugzilla-daemon＠bugs.koha-community.org 22 Aug '24

22 Aug '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37323 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Version|unspecified |Main Product|Koha security |Koha Group|Koha security | CC| |gmcharlt(a)gmail.com, | |kyle.m.hall(a)gmail.com Component|Koha |Patrons QA Contact| |testopia(a)bugs.koha-communit | |y.org --- Comment #36 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- I've filed this as a follow-up bug: Bug 37712 - Switch picture-upload.pl to use Koha::Uploader -- You are receiving this mail because: You are watching all bug changes.

1 0