[koha-commits] main Koha release repository branch 16.11.x updated. v16.11.11-1-69-ged45b5f
Git repo owner
gitmaster at git.koha-community.org
Tue Sep 26 07:45:28 CEST 2017
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".
The branch, 16.11.x has been updated
via ed45b5f4e4f38c72d1e28ab19b94f1c37bc51d91 (commit)
via 7d7a166922b934eeddabe5c6025cce0006c6d1ad (commit)
via 7d03ff0d8c254cf01649cc04b2c7801288764fe2 (commit)
via 2e7d3eebac29d129f2d25f223859d1662e4d7a5c (commit)
via 124b65eef5cc0394fcba6398091e3307121332c8 (commit)
via 2f5aee8a663c8ead0ad3f7dc90028281b13de1e6 (commit)
via a9c4abdd0c341bb936799b406e36d26672140f11 (commit)
via 9dd324767b475162c65a00125eaa676a03a1514d (commit)
via aa628f89fd356d6d4d975e68419844cb94d1cb73 (commit)
via 5950aed63ac3dcb88a64c0b6297dd70c4e7fb61c (commit)
via 8b61a24479ac84c4c51f4d9828b20725a1c0c7a0 (commit)
via 556467290849513549d334e00442941a1033e5b4 (commit)
via 9aae3ca54cb6f390ee8c8cd8b167f6631020e9c6 (commit)
via 7519003be921cde17f8547fb242635b109bfb0a1 (commit)
via 543aef4ead52f49cc5804e72165dc6bee5eca6ac (commit)
via c092ea7261e310f85298adbd2800e5016585ece8 (commit)
via a71269b23b580d68e45e1bf61285f651c64f1edf (commit)
via d6369b8e8982077102dace171d3e7923d67037d8 (commit)
via 4ee823f8687605ee54011e09c5a802da6f928ec0 (commit)
via a2e811dafc006db60bcd4223dd7dc7c66f0308e4 (commit)
via 39145c660954ab6c3451ee73bb0fc24002470bde (commit)
via 97283ef94bd0ae179c0c13759ecf7495552d28d9 (commit)
via cf373de7a8e811032b1d6a9ebac1652bed87a59e (commit)
via 5e405e8d5da74bfe5ffb6be40a7dbd9937017670 (commit)
via 026ff59914398022364993ae7d568def17f1ba40 (commit)
via f6bb532a9a5448ae1dba1a9b0fdaaa99f1271304 (commit)
via 2aac25bb7a8d750d6f234b6f076682ae40158e7c (commit)
via b9e460f398f573b15daee4d7f9328d08d1418535 (commit)
via 8ae521da59d5376607c8a7d763a15177fa257444 (commit)
via f17be038ebb4c5f05d402a2a93e70c78c306d373 (commit)
from 42b30105ffd2b6814873fad1cff5cd4d35c140ee (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit ed45b5f4e4f38c72d1e28ab19b94f1c37bc51d91
Author: Katrin Fischer <katrin.fischer.83 at web.de>
Date: Tue Sep 19 22:15:34 2017 +0000
Add release notes for Koha 16.11.12
commit 7d7a166922b934eeddabe5c6025cce0006c6d1ad
Merge: 2e7d3ee 7d03ff0
Author: Katrin Fischer <katrin.fischer.83 at web.de>
Date: Tue Sep 19 23:34:45 2017 +0200
Merge remote-tracking branch 'transl/16.11.12-translate-20170919' into 16.11.x
commit 7d03ff0d8c254cf01649cc04b2c7801288764fe2
Author: root <root at translate.koha-community.org>
Date: Tue Sep 19 18:32:01 2017 -0300
Translation updates for Koha 16.11.12
commit 2e7d3eebac29d129f2d25f223859d1662e4d7a5c
Author: Katrin Fischer <katrin.fischer.83 at web.de>
Date: Tue Sep 19 23:24:47 2017 +0200
Increment version for 16.11.12 release
commit 124b65eef5cc0394fcba6398091e3307121332c8
Author: Mark Tompsett <mtompset at hotmail.com>
Date: Fri Sep 1 13:16:43 2017 -0400
Bug 19235: Password entry visible in OPAC Self-registration
The HTML code was "text" instead of "password".
TEST PLAN
----------
1) 'Allow' PatronSelfRegistration system preference
2) Define the PatronSelfRegistrationDefaultCategory system preference (e.g. PT)
3) Open OPAC
4) Click 'Register here' on the right. (/cgi-bin/koha/opac-memberentry.pl)
5) Scroll to bottom
6) enter some passwords
-- visible
7) apply this patch
8) refresh page
9) repeat 5-6 as needed
-- passwords should not be visible while entering
10) run koha qa test tools
Signed-off-by: Lee Jamison <ldjamison at marywood.edu>
Signed-off-by: Nick Clemens <nick at bywatersolutions.com>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 99e691feee5ef29bbc9d24a916fc4aa2fab6bba6)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit b7856f76af9e0bbef7dca6458c8074710a309ca8)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 2f5aee8a663c8ead0ad3f7dc90028281b13de1e6
Author: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Date: Fri Sep 8 10:14:10 2017 +0200
Bug 15438: [QA Follow-up] Moving POD statement for CanBookBeIssued
The statement for head3 NB ('nota bene'?) looks like a hash key
in the list of possible return values for $needsconfirmation.
Moved it up and prefixed it with IMPORTANT.
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 133e25c56ac79e0b88b89e3b749df338e63a93d0)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit f99f0b7a4a81379adbdc84e8fcae7ac1d6af5fd6)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit a9c4abdd0c341bb936799b406e36d26672140f11
Author: Colin Campbell <colin.campbell at ptfs-europe.com>
Date: Wed Aug 24 13:52:52 2016 +0100
Bug 15438 - Checking out an on-hold item sends holder's borrowernumber in AF (screen message) field.
The returns from C4::Circulation::CanBookBeIssued used
to be structured as a hashref of entries like
REASON => {
data => 'foo',
moredata => 'bar',
};
Some entries still are. But many are now
REASON => 1,
data => 'foo',
moredata => 'bar',
The sip Checkout routine still assumed the former, as it
reports any causes it was not aware of (to maintain support for
a changing api) The data fields could leak into the screen message
field of the response. e.g. the borrowernumber or surname of the
borrower who has a hold on an issued title. Some real messages were
getting obscured by this
This patch sanatizes the return from from CanBookBeIssued
by removing keys which are not all uppercase
It also fixes a case where the key's data element was used
for the screen message when we should use the key itself
Updated the documentation of CanBookBeIssued to flag up
the assumption re case and the fact that 3 elements rather
than two may be returned
The loop through the returned keys was a bit bogus
so we now explicitly jump out if noerror is unset
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Tested quite extensively. Test results put on Bugzilla.
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 4d223bdc6156fab0667867f3990854fddfab5684)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit fcd8e322f5248425c89fe28567d10866d0d76a36)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 9dd324767b475162c65a00125eaa676a03a1514d
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date: Tue Sep 12 11:21:27 2017 -0300
Bug 19127: (follow-up) Stored XSS in csv-profiles.pl
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 52b41dfdf0ec03c24dd970b80e4f153f64702e30)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit d6579c70190935801870cfe56a1a09a8d04c2b0e)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit aa628f89fd356d6d4d975e68419844cb94d1cb73
Author: Amit Gupta <amit.gupta at informaticsglobal.com>
Date: Wed Aug 16 17:56:17 2017 +0530
Bug 19127 - Stored XSS in csv-profiles.pl
To Test
1. Hit the page /cgi-bin/koha/tools/csv-profiles.pl?op=add_form
2. Add a text in the field Profile name, Profile description
and Profile MARC fields that contains js
3. Save the page.
4. Notice js is execute
5. Apply patch and reload, the js is escaped
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 7a3ee2dd8cb233d083d8a7b8636eca7c6d518b8b)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 9b4777878f59c7a0c3653f54b6a2cff85bb278a8)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 5950aed63ac3dcb88a64c0b6297dd70c4e7fb61c
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date: Tue Sep 12 11:06:11 2017 -0300
Bug 19108: (follow-up) Stored XSS in biblio_framework.pl
Prevent software error
Template process failed: undef error - text: filter not found at
/home/vagrant/kohaclone/C4/Templates.pm line 121.
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit f904b019f77cd19ca0373f9635811a634ac73321)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit d5c7edc55da6aaf78d25d131ebb35ab659a0084d)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 8b61a24479ac84c4c51f4d9828b20725a1c0c7a0
Author: Katrin Fischer <katrin.fischer.83 at web.de>
Date: Wed Aug 16 13:52:07 2017 +0200
Bug 19108 - Follow-up - fieldmapping.tt and items_search_fields.tt
To test:
- Add a framework with script in the description
- Access the Keywords to MARC mapping page
- Add an item search field where both name and label are script
- Try to edit/delete the added mapping
With the patch no script should be executed and everything
should still work ok.
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 1649be1e9f510543f85b9e3a22af88ae8c6bfb9c)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 845ee9282472f9a309b3af4aff49403b93091b19)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 556467290849513549d334e00442941a1033e5b4
Author: Amit Gupta <amit.gupta at informaticsglobal.com>
Date: Tue Aug 15 14:37:50 2017 +0530
Bug 19108 - Stored XSS in biblio_framework.pl and marctagstructure.pl
To Test
1. Hit the page /cgi-bin/koha/admin/biblio_framework.pl?op=add_form
2. Add a text in the field Description that contains js
3. Save the page.
4. Notice js is execute
5. Click on Actions -> MARC structure
6. Apply patch and reload, the js is escaped
Fixed for both the pages biblio_framework.pl and marctagstructure.pl
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 29ab5517f5c8cfbc86b98c3197846d005007cc12)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 83fdc8aea52533dbcb4261fd986d5760e5baa6df)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 9aae3ca54cb6f390ee8c8cd8b167f6631020e9c6
Author: Amit Gupta <amit.gupta at informaticsglobal.com>
Date: Tue Aug 15 14:10:43 2017 +0530
Bug 19108 - Stored XSS in fieldmapping.pl
To Test
1. Hit the page /cgi-bin/koha/admin/fieldmapping.pl
2. Add a text in the field Field name that contains js
3. Save the page.
4. Notice js is execute
5. Apply patch and reload, the js is escaped
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 77ddae74d661fb589d74bd85f5561fdd4131af70)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit eccce3e1ba3bbcb73d47defc49b322fe578e5014)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 7519003be921cde17f8547fb242635b109bfb0a1
Author: Amit Gupta <amit.gupta at informaticsglobal.com>
Date: Tue Aug 15 14:06:47 2017 +0530
Bug 19108 - Stored XSS in authtypes.pl
To Test
1. Hit the page /cgi-bin/koha/admin/authtypes.pl?op=add_form
2. Add a text in the field Description that contains js
3. Save the page.
4. Notice js is execute
5. Apply patch and reload, the js is escaped
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit bc780f588bc908f8b1d0da8987b20914996d942c)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 520388dc1d6f3e0e6ada332cf232784e4e737834)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 543aef4ead52f49cc5804e72165dc6bee5eca6ac
Author: Amit Gupta <amit.gupta at informaticsglobal.com>
Date: Tue Aug 15 13:55:45 2017 +0530
Bug 19108 - Stored XSS in classsources.pl
Fixed for both Classification sources & Classification filing rules
To Test
1. first case classification source: Hit the page
/cgi-bin/koha/admin/classsources.pl?op=add_source
second case classification filing rules:
Hit the page /cgi-bin/koha/admin/classsources.pl?op=add_sort_rule
2. Add a text in the field Description that contains js
3. Save the page.
4. Notice js is execute
5. Apply patch and reload, the js is escaped
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 940c8634914b50940cfaf73af3611e6282d5803f)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 64abaa063d578567c18ee84a8e6abc424fa0da97)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit c092ea7261e310f85298adbd2800e5016585ece8
Author: Amit Gupta <amit.gupta at informaticsglobal.com>
Date: Tue Aug 15 13:49:10 2017 +0530
Bug 19108 - Stored XSS in items_search_fields.pl
To Test
1. Hit the page /cgi-bin/koha/admin/items_search_fields.pl
2. Add a text in the field Name and Label that contains js
3. Save the page.
4. Notice js is execute
5. Apply patch and reload, the js is escaped
Fixed for new and edit page
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 063fd5e1b9e086c57987fae408b4ce6e51fec2b9)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 332d705e725a0672eafdeedb88d3848fca4b2a8b)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit a71269b23b580d68e45e1bf61285f651c64f1edf
Author: Amit Gupta <amit.gupta at informaticsglobal.com>
Date: Tue Aug 15 13:33:57 2017 +0530
Bug 19108 - Stored XSS in oai_sets.pl
To Test
1. Hit the page /cgi-bin/koha/admin/oai_sets.pl
2. Click on New set
3. Add a text in the field setSpec, setName that contains js
4. Save the page.
5. Notice js is execute
6. Apply patch and reload, the js is escaped
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 10d3a8c212f8a45e40cd2644f94d555566a10018)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 20b4c81c1a1e1c93ecdc5ebeeddb870a802a7d4a)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit d6369b8e8982077102dace171d3e7923d67037d8
Author: Amit Gupta <amit.gupta at informaticsglobal.com>
Date: Tue Aug 15 10:15:54 2017 +0530
Bug 19103 - Stored XSS in matching-rules.pl
To Test
1. Hit the page /cgi-bin/koha/admin/matching-rules.pl
2. Click on new record matching rule
3. Add a text in the field Description that contain js.
4. Save the page.
5. Notice js is execute
6. Apply patch and reload, the js is escaped
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 9222cd77d282affffba43a40a9ff2f768647501e)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit fb90eee74c483eb188b8c682a1259ba964f9c2b8)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 4ee823f8687605ee54011e09c5a802da6f928ec0
Author: Amit Gupta <amit.gupta at informaticsglobal.com>
Date: Tue Aug 15 10:07:45 2017 +0530
Bug 19103 - Stored XSS in patron-attr-types.pl
To Test
1. Hit the page /cgi-bin/koha/admin/patron-attr-types.pl
2. Click on new patron attribute type
2. Add a text in the field Description that contain js.
2. Save the page.
3. Notice js is execute
4. Apply patch and reload, the js is escaped
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit cb0c3da4b6cec991194ce91e6412cf9d50562044)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 6fc53fb6df1e638f5cea70254612f7e60ff4de2f)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit a2e811dafc006db60bcd4223dd7dc7c66f0308e4
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date: Tue Sep 12 10:58:24 2017 -0300
Bug 19103: (follow-up) Stored XSS in itemtypes.pl
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit c221bc40a330a25d59097e94e962a4afcea011af)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit e3e035c3ef1f89c416922f6a81fdc2b4596f900e)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 39145c660954ab6c3451ee73bb0fc24002470bde
Author: Amit Gupta <amit.gupta at informaticsglobal.com>
Date: Tue Aug 15 08:52:40 2017 +0530
Bug 19103 - Stored XSS in itemtypes.pl
To Test
1. Hit the page /cgi-bin/koha/admin/itemtypes.pl
2. Add a text in the field Description, Checkin message that contains js
2. Save the page.
3. Notice js is execute
4. Apply patch and reload, the js is escaped
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 18b5d4f1ababf560ff02a258de389f8c34cff9e4)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 4653a5209acf51cdc5977ff082d9b658f9959350)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 97283ef94bd0ae179c0c13759ecf7495552d28d9
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date: Tue Sep 12 10:35:10 2017 -0300
Bug 19128: XSS - admin/authorised_values.tt
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit ad230cdcb5ad69541a89a4edaedcadde9d25b88a)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit c7a6dbca09c3aababf71349a9403b8e1e9e3e2bc)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit cf373de7a8e811032b1d6a9ebac1652bed87a59e
Author: Katrin Fischer <katrin.fischer.83 at web.de>
Date: Wed Aug 16 14:34:17 2017 +0200
Bug 19128 - XSS - patron-attr-types.tt, authorised_values.tt and categories.tt
Preparation:
- Add a branch with script in the branch name
- Add a patron category with script in the category name
- Add a new authorised value cateogory with script
- Add a new authroised value for this category with script
in all possible fields
- Test editing patron categories
- Test editing patron attribute types
- Test viewing and editing authorised values
Verify that with this script there is no more script executed
and everything works fine.
Signed-off-by: Amit Gupta <amit.gupta at informaticsglobal.com>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 6b7ad77fffd7a6c4b69bce5bf666c6ff4be76c5b)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 8b85e835541e650cfa4c867bcd65fc5d03334613)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 5e405e8d5da74bfe5ffb6be40a7dbd9937017670
Author: Katrin Fischer <katrin.fischer.83 at web.de>
Date: Wed Aug 16 12:05:50 2017 +0200
Bug 19125 - XSS - members.pl
In preparation to test this patch:
- Add a patron list named <script>alert("patron list")</script>
- Add a library named <script>alert("library")</script>
- Add a patron category named <script>alert("patron category")</script>
To test:
- Access patron search page and do a search
- Verify that the alerts added above are executed
- Apply patch
- Verify that no alerts are displayed
Signed-off-by: Amit Gupta <amit.gupta at informaticsglobal.com>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 849eaf73fc419b9a635a1ba4b69ef46a7544e55a)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 2b0bd9add5deae0ab5bee79ee75a6cb769d0dea8)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 026ff59914398022364993ae7d568def17f1ba40
Author: Katrin Fischer <katrin.fischer.83 at web.de>
Date: Wed Aug 16 13:07:18 2017 +0200
Bug 19086 - Follow-up - subscription-detail.pl
Add script to the callnumber field on adding a subscription.
Verify script is executed without this patch, but not with it.
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 3ebcd2475dd35db47c33bcc59d5e75968667b518)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit b03752fa781695f9fb506be7ea5afd9fb3db4a08)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit f6bb532a9a5448ae1dba1a9b0fdaaa99f1271304
Author: Katrin Fischer <katrin.fischer.83 at web.de>
Date: Wed Aug 16 12:59:13 2017 +0200
Bug 19086 - Follow-up - XSS in supplier.tt
In preparation:
Make sure you enter <script>alert("sth")</script>
in all fields of a new vendor that are not validated
and save.
1) Access vendor summary page.
2) Verify scripts are executed
3) Apply patch
4) Verify scripts are on longer executed
This works in combination with the other patches for XSS
on this bug.
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 14a1aba57cc091a70c527a0d6bd495d21bd87345)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 13147e7c05daa73a4f562541c3a7f8c98747bc83)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 2aac25bb7a8d750d6f234b6f076682ae40158e7c
Author: Amit Gupta <amit.gupta at informaticsglobal.com>
Date: Tue Aug 15 02:44:11 2017 +0530
Bug 19086 Stored XSS in subscription-add.pl
To Test
1. Hit the page /cgi-bin/koha/serials/subscription-add.pl
2. Add a text in the field Public note and Nonpublic note
that contains js (Internalnotes, notes)
2. Save the page.
3. Notice js is execute
4. Apply patch and reload, the js is escaped
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit ebf781afc133508eddcb8dc8fb6d7429a72db99b)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit c4a1eafb5bac265c936567807e94ab22d04a1094)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit b9e460f398f573b15daee4d7f9328d08d1418535
Author: Amit Gupta <amit.gupta at informaticsglobal.com>
Date: Tue Aug 15 02:33:59 2017 +0530
Bug 19086 Stored XSS in supplier.pl
1. Hit the page /cgi-bin/koha/acqui/supplier.pl?op=enter
2. Add a text in the field company_postal, physical, company_fax,
accountnumber, contactposition, contact_fax, contact_notes, notes that contains java script
3. Save the page.
4. Notice js is execute
5. Apply patch and reload the js is escaped
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 9d0bbf5fa7455e0eb64288652802b0836cf22690)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 46f91605a4044ebbf74f7014305078a1304afcd1)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit 8ae521da59d5376607c8a7d763a15177fa257444
Author: Chris Cormack <chris at bigballofwax.co.nz>
Date: Fri Aug 11 19:54:34 2017 +0000
Bug 19086 Stored XSS in circulation.pl
1/ To test add a message to a borrower that contains js
2/ hit /cgi-bin/koha/circ/circulation.pl?borrowernumber=[number]
where number is the borrowernumber of the borrower you set the message
for
3/ Notice js is execute
4/ Apply patch, reload, js is escaped
Signed-off-by: Amit Gupta <amit.gupta at informaticsglobal.com>
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 80c93d3499b11f3574fbafe756f94c534b746d5a)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 0a53a9e7f35855405024d03bde01d49f560f99ee)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
commit f17be038ebb4c5f05d402a2a93e70c78c306d373
Author: Chris Cormack <chris at bigballofwax.co.nz>
Date: Fri Aug 11 19:36:43 2017 +0000
Bug 19086 XSS in members/member.pl
To test
1/ hit /cgi-bin/koha/members/member.pl?&searchmember=<script>alert('XSS Payload')</script>
2/ Notice js is executed
3/ Apply patch, reload
4/ js is now escaped
Signed-off-by: Amit Gupta <amit.gupta at informaticsglobal.com>
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
(cherry picked from commit 5ae18484b5a47e8a00ce8f1a0fd8b3db471947eb)
Signed-off-by: Fridolin Somers <fridolin.somers at biblibre.com>
(cherry picked from commit 44814081a72a995a91f7057d9158b18167c65dca)
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
-----------------------------------------------------------------------
Summary of changes:
C4/Circulation.pm | 8 +-
C4/SIP/ILS/Transaction/Checkout.pm | 42 +-
Koha.pm | 2 +-
installer/data/mysql/updatedatabase.pl | 6 +
.../en/includes/admin-items-search-field-form.inc | 4 +-
.../prog/en/includes/html_helpers.inc | 2 +-
.../prog/en/includes/patron-search.inc | 6 +-
.../prog/en/includes/patron-toolbar.inc | 4 +-
.../prog/en/modules/acqui/supplier.tt | 32 +-
.../prog/en/modules/admin/authorised_values.tt | 26 +-
.../prog/en/modules/admin/authtypes.tt | 4 +-
.../prog/en/modules/admin/biblio_framework.tt | 12 +-
.../prog/en/modules/admin/categories.tt | 4 +-
.../prog/en/modules/admin/classsources.tt | 4 +-
.../prog/en/modules/admin/fieldmapping.tt | 12 +-
.../prog/en/modules/admin/items_search_field.tt | 4 +-
.../prog/en/modules/admin/items_search_fields.tt | 10 +-
.../prog/en/modules/admin/itemtypes.tt | 4 +-
.../prog/en/modules/admin/marctagstructure.tt | 18 +-
.../prog/en/modules/admin/matching-rules.tt | 2 +-
.../prog/en/modules/admin/oai_set_mappings.tt | 2 +-
.../prog/en/modules/admin/oai_sets.tt | 10 +-
.../prog/en/modules/admin/patron-attr-types.tt | 12 +-
.../prog/en/modules/circ/circulation.tt | 2 +-
.../prog/en/modules/members/member.tt | 10 +-
.../prog/en/modules/serials/subscription-detail.tt | 6 +-
.../prog/en/modules/tools/csv-profiles.tt | 12 +-
.../bootstrap/en/modules/opac-memberentry.tt | 8 +-
...s_16_11_11.html => release_notes_16_11_12.html} | 235 +--
misc/release_notes/release_notes_16_11_12.md | 309 ++++
misc/translator/po/am-Ethi-marc-MARC21.po | 3 +-
misc/translator/po/am-Ethi-marc-NORMARC.po | 2 +-
misc/translator/po/am-Ethi-marc-UNIMARC.po | 2 +-
misc/translator/po/am-Ethi-opac-bootstrap.po | 49 +-
misc/translator/po/am-Ethi-staff-help.po | 2 +-
misc/translator/po/am-Ethi-staff-prog.po | 1282 +++++++++--------
misc/translator/po/ar-Arab-marc-MARC21.po | 3 +-
misc/translator/po/ar-Arab-marc-NORMARC.po | 2 +-
misc/translator/po/ar-Arab-marc-UNIMARC.po | 2 +-
misc/translator/po/ar-Arab-opac-bootstrap.po | 53 +-
misc/translator/po/ar-Arab-staff-help.po | 2 +-
misc/translator/po/ar-Arab-staff-prog.po | 1358 +++++++++---------
misc/translator/po/as-IN-marc-MARC21.po | 3 +-
misc/translator/po/as-IN-marc-NORMARC.po | 2 +-
misc/translator/po/as-IN-marc-UNIMARC.po | 2 +-
misc/translator/po/as-IN-opac-bootstrap.po | 49 +-
misc/translator/po/as-IN-staff-help.po | 2 +-
misc/translator/po/as-IN-staff-prog.po | 1278 +++++++++--------
misc/translator/po/az-AZ-marc-MARC21.po | 3 +-
misc/translator/po/az-AZ-marc-NORMARC.po | 2 +-
misc/translator/po/az-AZ-marc-UNIMARC.po | 2 +-
misc/translator/po/az-AZ-opac-bootstrap.po | 49 +-
misc/translator/po/az-AZ-staff-help.po | 2 +-
misc/translator/po/az-AZ-staff-prog.po | 1278 +++++++++--------
misc/translator/po/be-BY-marc-MARC21.po | 3 +-
misc/translator/po/be-BY-marc-NORMARC.po | 2 +-
misc/translator/po/be-BY-marc-UNIMARC.po | 2 +-
misc/translator/po/be-BY-opac-bootstrap.po | 50 +-
misc/translator/po/be-BY-staff-help.po | 2 +-
misc/translator/po/be-BY-staff-prog.po | 1308 +++++++++--------
misc/translator/po/bg-Cyrl-marc-MARC21.po | 3 +-
misc/translator/po/bg-Cyrl-marc-NORMARC.po | 2 +-
misc/translator/po/bg-Cyrl-marc-UNIMARC.po | 2 +-
misc/translator/po/bg-Cyrl-opac-bootstrap.po | 49 +-
misc/translator/po/bg-Cyrl-staff-help.po | 2 +-
misc/translator/po/bg-Cyrl-staff-prog.po | 1282 +++++++++--------
misc/translator/po/bn-IN-marc-MARC21.po | 3 +-
misc/translator/po/bn-IN-marc-NORMARC.po | 2 +-
misc/translator/po/bn-IN-marc-UNIMARC.po | 2 +-
misc/translator/po/bn-IN-opac-bootstrap.po | 49 +-
misc/translator/po/bn-IN-staff-help.po | 2 +-
misc/translator/po/bn-IN-staff-prog.po | 1282 +++++++++--------
misc/translator/po/ca-ES-marc-MARC21.po | 3 +-
misc/translator/po/ca-ES-marc-NORMARC.po | 2 +-
misc/translator/po/ca-ES-marc-UNIMARC.po | 2 +-
misc/translator/po/ca-ES-opac-bootstrap.po | 54 +-
misc/translator/po/ca-ES-staff-help.po | 2 +-
misc/translator/po/ca-ES-staff-prog.po | 1278 +++++++++--------
misc/translator/po/cs-CZ-marc-MARC21.po | 3 +-
misc/translator/po/cs-CZ-marc-NORMARC.po | 2 +-
misc/translator/po/cs-CZ-marc-UNIMARC.po | 2 +-
misc/translator/po/cs-CZ-opac-bootstrap.po | 54 +-
misc/translator/po/cs-CZ-staff-help.po | 2 +-
misc/translator/po/cs-CZ-staff-prog.po | 1379 +++++++++---------
misc/translator/po/cy-GB-marc-MARC21.po | 3 +-
misc/translator/po/cy-GB-marc-NORMARC.po | 2 +-
misc/translator/po/cy-GB-marc-UNIMARC.po | 2 +-
misc/translator/po/cy-GB-opac-bootstrap.po | 49 +-
misc/translator/po/cy-GB-staff-help.po | 2 +-
misc/translator/po/cy-GB-staff-prog.po | 1278 +++++++++--------
misc/translator/po/da-DK-marc-MARC21.po | 3 +-
misc/translator/po/da-DK-marc-NORMARC.po | 2 +-
misc/translator/po/da-DK-marc-UNIMARC.po | 2 +-
misc/translator/po/da-DK-opac-bootstrap.po | 54 +-
misc/translator/po/da-DK-staff-help.po | 2 +-
misc/translator/po/da-DK-staff-prog.po | 1323 +++++++++--------
misc/translator/po/de-CH-marc-MARC21.po | 3 +-
misc/translator/po/de-CH-marc-NORMARC.po | 2 +-
misc/translator/po/de-CH-marc-UNIMARC.po | 2 +-
misc/translator/po/de-CH-opac-bootstrap.po | 59 +-
misc/translator/po/de-CH-staff-help.po | 2 +-
misc/translator/po/de-CH-staff-prog.po | 1375 +++++++++---------
misc/translator/po/de-DE-marc-MARC21.po | 3 +-
misc/translator/po/de-DE-marc-NORMARC.po | 2 +-
misc/translator/po/de-DE-marc-UNIMARC.po | 2 +-
misc/translator/po/de-DE-opac-bootstrap.po | 64 +-
misc/translator/po/de-DE-staff-help.po | 6 +-
misc/translator/po/de-DE-staff-prog.po | 1405 +++++++++---------
misc/translator/po/el-GR-marc-MARC21.po | 3 +-
misc/translator/po/el-GR-marc-NORMARC.po | 2 +-
misc/translator/po/el-GR-marc-UNIMARC.po | 2 +-
misc/translator/po/el-GR-opac-bootstrap.po | 56 +-
misc/translator/po/el-GR-staff-help.po | 2 +-
misc/translator/po/el-GR-staff-prog.po | 1359 +++++++++---------
misc/translator/po/en-GB-marc-MARC21.po | 3 +-
misc/translator/po/en-GB-marc-NORMARC.po | 2 +-
misc/translator/po/en-GB-marc-UNIMARC.po | 2 +-
misc/translator/po/en-GB-opac-bootstrap.po | 49 +-
misc/translator/po/en-GB-staff-help.po | 2 +-
misc/translator/po/en-GB-staff-prog.po | 1278 +++++++++--------
misc/translator/po/en-NZ-marc-MARC21.po | 3 +-
misc/translator/po/en-NZ-marc-NORMARC.po | 2 +-
misc/translator/po/en-NZ-marc-UNIMARC.po | 2 +-
misc/translator/po/en-NZ-opac-bootstrap.po | 54 +-
misc/translator/po/en-NZ-staff-help.po | 2 +-
misc/translator/po/en-NZ-staff-prog.po | 1356 +++++++++---------
misc/translator/po/eo-marc-MARC21.po | 3 +-
misc/translator/po/eo-marc-NORMARC.po | 2 +-
misc/translator/po/eo-marc-UNIMARC.po | 2 +-
misc/translator/po/eo-opac-bootstrap.po | 53 +-
misc/translator/po/eo-staff-help.po | 2 +-
misc/translator/po/eo-staff-prog.po | 1282 +++++++++--------
misc/translator/po/es-ES-marc-MARC21.po | 14 +-
misc/translator/po/es-ES-marc-NORMARC.po | 2 +-
misc/translator/po/es-ES-marc-UNIMARC.po | 2 +-
misc/translator/po/es-ES-opac-bootstrap.po | 58 +-
misc/translator/po/es-ES-staff-help.po | 2 +-
misc/translator/po/es-ES-staff-prog.po | 1384 +++++++++---------
misc/translator/po/eu-marc-MARC21.po | 3 +-
misc/translator/po/eu-marc-NORMARC.po | 2 +-
misc/translator/po/eu-marc-UNIMARC.po | 2 +-
misc/translator/po/eu-opac-bootstrap.po | 54 +-
misc/translator/po/eu-staff-help.po | 2 +-
misc/translator/po/eu-staff-prog.po | 1282 +++++++++--------
misc/translator/po/fa-Arab-marc-MARC21.po | 3 +-
misc/translator/po/fa-Arab-marc-NORMARC.po | 2 +-
misc/translator/po/fa-Arab-marc-UNIMARC.po | 2 +-
misc/translator/po/fa-Arab-opac-bootstrap.po | 54 +-
misc/translator/po/fa-Arab-staff-help.po | 2 +-
misc/translator/po/fa-Arab-staff-prog.po | 1323 +++++++++--------
misc/translator/po/fi-FI-marc-MARC21.po | 3 +-
misc/translator/po/fi-FI-marc-NORMARC.po | 2 +-
misc/translator/po/fi-FI-marc-UNIMARC.po | 2 +-
misc/translator/po/fi-FI-opac-bootstrap.po | 54 +-
misc/translator/po/fi-FI-staff-help.po | 2 +-
misc/translator/po/fi-FI-staff-prog.po | 1362 +++++++++---------
misc/translator/po/fo-FO-marc-MARC21.po | 3 +-
misc/translator/po/fo-FO-marc-NORMARC.po | 2 +-
misc/translator/po/fo-FO-marc-UNIMARC.po | 2 +-
misc/translator/po/fo-FO-opac-bootstrap.po | 49 +-
misc/translator/po/fo-FO-staff-help.po | 2 +-
misc/translator/po/fo-FO-staff-prog.po | 1278 +++++++++--------
misc/translator/po/fr-CA-marc-MARC21.po | 3 +-
misc/translator/po/fr-CA-marc-NORMARC.po | 2 +-
misc/translator/po/fr-CA-marc-UNIMARC.po | 2 +-
misc/translator/po/fr-CA-opac-bootstrap.po | 54 +-
misc/translator/po/fr-CA-staff-help.po | 2 +-
misc/translator/po/fr-CA-staff-prog.po | 1373 +++++++++---------
misc/translator/po/fr-FR-marc-MARC21.po | 11 +-
misc/translator/po/fr-FR-marc-NORMARC.po | 2 +-
misc/translator/po/fr-FR-marc-UNIMARC.po | 2 +-
misc/translator/po/fr-FR-opac-bootstrap.po | 62 +-
misc/translator/po/fr-FR-staff-help.po | 2 +-
misc/translator/po/fr-FR-staff-prog.po | 1388 +++++++++---------
misc/translator/po/gl-marc-MARC21.po | 3 +-
misc/translator/po/gl-marc-NORMARC.po | 2 +-
misc/translator/po/gl-marc-UNIMARC.po | 2 +-
misc/translator/po/gl-opac-bootstrap.po | 49 +-
misc/translator/po/gl-staff-help.po | 2 +-
misc/translator/po/gl-staff-prog.po | 1278 +++++++++--------
misc/translator/po/he-Hebr-marc-MARC21.po | 3 +-
misc/translator/po/he-Hebr-marc-NORMARC.po | 2 +-
misc/translator/po/he-Hebr-marc-UNIMARC.po | 2 +-
misc/translator/po/he-Hebr-opac-bootstrap.po | 49 +-
misc/translator/po/he-Hebr-staff-help.po | 2 +-
misc/translator/po/he-Hebr-staff-prog.po | 1278 +++++++++--------
misc/translator/po/hi-marc-MARC21.po | 3 +-
misc/translator/po/hi-marc-NORMARC.po | 2 +-
misc/translator/po/hi-marc-UNIMARC.po | 2 +-
misc/translator/po/hi-opac-bootstrap.po | 53 +-
misc/translator/po/hi-staff-help.po | 2 +-
misc/translator/po/hi-staff-prog.po | 1353 +++++++++---------
misc/translator/po/hr-HR-marc-MARC21.po | 3 +-
misc/translator/po/hr-HR-marc-NORMARC.po | 2 +-
misc/translator/po/hr-HR-marc-UNIMARC.po | 2 +-
misc/translator/po/hr-HR-opac-bootstrap.po | 54 +-
misc/translator/po/hr-HR-staff-help.po | 2 +-
misc/translator/po/hr-HR-staff-prog.po | 1296 +++++++++--------
misc/translator/po/hu-HU-marc-MARC21.po | 3 +-
misc/translator/po/hu-HU-marc-NORMARC.po | 2 +-
misc/translator/po/hu-HU-marc-UNIMARC.po | 2 +-
misc/translator/po/hu-HU-opac-bootstrap.po | 54 +-
misc/translator/po/hu-HU-staff-help.po | 2 +-
misc/translator/po/hu-HU-staff-prog.po | 1278 +++++++++--------
misc/translator/po/hy-Armn-marc-MARC21.po | 3 +-
misc/translator/po/hy-Armn-marc-NORMARC.po | 2 +-
misc/translator/po/hy-Armn-marc-UNIMARC.po | 2 +-
misc/translator/po/hy-Armn-opac-bootstrap.po | 54 +-
misc/translator/po/hy-Armn-staff-help.po | 2 +-
misc/translator/po/hy-Armn-staff-prog.po | 1355 +++++++++---------
misc/translator/po/ia-marc-MARC21.po | 3 +-
misc/translator/po/ia-marc-NORMARC.po | 2 +-
misc/translator/po/ia-marc-UNIMARC.po | 2 +-
misc/translator/po/ia-opac-bootstrap.po | 49 +-
misc/translator/po/ia-staff-help.po | 2 +-
misc/translator/po/ia-staff-prog.po | 1278 +++++++++--------
misc/translator/po/id-ID-marc-MARC21.po | 3 +-
misc/translator/po/id-ID-marc-NORMARC.po | 2 +-
misc/translator/po/id-ID-marc-UNIMARC.po | 2 +-
misc/translator/po/id-ID-opac-bootstrap.po | 50 +-
misc/translator/po/id-ID-staff-help.po | 2 +-
misc/translator/po/id-ID-staff-prog.po | 1298 +++++++++--------
misc/translator/po/iq-CA-marc-MARC21.po | 3 +-
misc/translator/po/iq-CA-marc-NORMARC.po | 2 +-
misc/translator/po/iq-CA-marc-UNIMARC.po | 2 +-
misc/translator/po/iq-CA-opac-bootstrap.po | 49 +-
misc/translator/po/iq-CA-staff-help.po | 2 +-
misc/translator/po/iq-CA-staff-prog.po | 1278 +++++++++--------
misc/translator/po/is-IS-marc-MARC21.po | 3 +-
misc/translator/po/is-IS-marc-NORMARC.po | 2 +-
misc/translator/po/is-IS-marc-UNIMARC.po | 2 +-
misc/translator/po/is-IS-opac-bootstrap.po | 49 +-
misc/translator/po/is-IS-staff-help.po | 2 +-
misc/translator/po/is-IS-staff-prog.po | 1279 +++++++++--------
misc/translator/po/it-IT-marc-MARC21.po | 3 +-
misc/translator/po/it-IT-marc-NORMARC.po | 2 +-
misc/translator/po/it-IT-marc-UNIMARC.po | 2 +-
misc/translator/po/it-IT-opac-bootstrap.po | 70 +-
misc/translator/po/it-IT-staff-help.po | 2 +-
misc/translator/po/it-IT-staff-prog.po | 1473 ++++++++++---------
misc/translator/po/iu-CA-marc-MARC21.po | 3 +-
misc/translator/po/iu-CA-marc-NORMARC.po | 2 +-
misc/translator/po/iu-CA-marc-UNIMARC.po | 2 +-
misc/translator/po/iu-CA-opac-bootstrap.po | 49 +-
misc/translator/po/iu-CA-staff-help.po | 2 +-
misc/translator/po/iu-CA-staff-prog.po | 1278 +++++++++--------
misc/translator/po/ja-Jpan-JP-marc-MARC21.po | 3 +-
misc/translator/po/ja-Jpan-JP-marc-NORMARC.po | 2 +-
misc/translator/po/ja-Jpan-JP-marc-UNIMARC.po | 2 +-
misc/translator/po/ja-Jpan-JP-opac-bootstrap.po | 49 +-
misc/translator/po/ja-Jpan-JP-staff-help.po | 2 +-
misc/translator/po/ja-Jpan-JP-staff-prog.po | 1278 +++++++++--------
misc/translator/po/ka-marc-MARC21.po | 3 +-
misc/translator/po/ka-marc-NORMARC.po | 2 +-
misc/translator/po/ka-marc-UNIMARC.po | 2 +-
misc/translator/po/ka-opac-bootstrap.po | 53 +-
misc/translator/po/ka-staff-help.po | 2 +-
misc/translator/po/ka-staff-prog.po | 1282 +++++++++--------
misc/translator/po/km-KH-marc-MARC21.po | 3 +-
misc/translator/po/km-KH-marc-NORMARC.po | 2 +-
misc/translator/po/km-KH-marc-UNIMARC.po | 2 +-
misc/translator/po/km-KH-opac-bootstrap.po | 49 +-
misc/translator/po/km-KH-staff-help.po | 2 +-
misc/translator/po/km-KH-staff-prog.po | 1282 +++++++++--------
misc/translator/po/kn-Knda-marc-MARC21.po | 3 +-
misc/translator/po/kn-Knda-marc-NORMARC.po | 2 +-
misc/translator/po/kn-Knda-marc-UNIMARC.po | 2 +-
misc/translator/po/kn-Knda-opac-bootstrap.po | 49 +-
misc/translator/po/kn-Knda-staff-help.po | 2 +-
misc/translator/po/kn-Knda-staff-prog.po | 1280 +++++++++--------
misc/translator/po/ko-Kore-KP-marc-MARC21.po | 3 +-
misc/translator/po/ko-Kore-KP-marc-NORMARC.po | 2 +-
misc/translator/po/ko-Kore-KP-marc-UNIMARC.po | 2 +-
misc/translator/po/ko-Kore-KP-opac-bootstrap.po | 52 +-
misc/translator/po/ko-Kore-KP-staff-help.po | 2 +-
misc/translator/po/ko-Kore-KP-staff-prog.po | 1323 +++++++++--------
misc/translator/po/ku-Arab-marc-MARC21.po | 3 +-
misc/translator/po/ku-Arab-marc-NORMARC.po | 2 +-
misc/translator/po/ku-Arab-marc-UNIMARC.po | 2 +-
misc/translator/po/ku-Arab-opac-bootstrap.po | 50 +-
misc/translator/po/ku-Arab-staff-help.po | 2 +-
misc/translator/po/ku-Arab-staff-prog.po | 1301 +++++++++--------
misc/translator/po/lo-Laoo-marc-MARC21.po | 3 +-
misc/translator/po/lo-Laoo-marc-NORMARC.po | 2 +-
misc/translator/po/lo-Laoo-marc-UNIMARC.po | 2 +-
misc/translator/po/lo-Laoo-opac-bootstrap.po | 50 +-
misc/translator/po/lo-Laoo-staff-help.po | 2 +-
misc/translator/po/lo-Laoo-staff-prog.po | 1291 +++++++++--------
misc/translator/po/mi-NZ-marc-MARC21.po | 3 +-
misc/translator/po/mi-NZ-marc-NORMARC.po | 2 +-
misc/translator/po/mi-NZ-marc-UNIMARC.po | 2 +-
misc/translator/po/mi-NZ-opac-bootstrap.po | 49 +-
misc/translator/po/mi-NZ-staff-help.po | 2 +-
misc/translator/po/mi-NZ-staff-prog.po | 1278 +++++++++--------
misc/translator/po/ml-marc-MARC21.po | 3 +-
misc/translator/po/ml-marc-NORMARC.po | 2 +-
misc/translator/po/ml-marc-UNIMARC.po | 2 +-
misc/translator/po/ml-opac-bootstrap.po | 49 +-
misc/translator/po/ml-staff-help.po | 2 +-
misc/translator/po/ml-staff-prog.po | 1278 +++++++++--------
misc/translator/po/mon-marc-MARC21.po | 3 +-
misc/translator/po/mon-marc-NORMARC.po | 2 +-
misc/translator/po/mon-marc-UNIMARC.po | 2 +-
misc/translator/po/mon-opac-bootstrap.po | 49 +-
misc/translator/po/mon-staff-help.po | 2 +-
misc/translator/po/mon-staff-prog.po | 1278 +++++++++--------
misc/translator/po/mr-marc-MARC21.po | 3 +-
misc/translator/po/mr-marc-NORMARC.po | 2 +-
misc/translator/po/mr-marc-UNIMARC.po | 2 +-
misc/translator/po/mr-opac-bootstrap.po | 49 +-
misc/translator/po/mr-staff-help.po | 2 +-
misc/translator/po/mr-staff-prog.po | 1291 +++++++++--------
misc/translator/po/ms-MY-marc-MARC21.po | 3 +-
misc/translator/po/ms-MY-marc-NORMARC.po | 2 +-
misc/translator/po/ms-MY-marc-UNIMARC.po | 2 +-
misc/translator/po/ms-MY-opac-bootstrap.po | 50 +-
misc/translator/po/ms-MY-staff-help.po | 2 +-
misc/translator/po/ms-MY-staff-prog.po | 1294 +++++++++--------
misc/translator/po/my-marc-MARC21.po | 3 +-
misc/translator/po/my-marc-NORMARC.po | 2 +-
misc/translator/po/my-marc-UNIMARC.po | 2 +-
misc/translator/po/my-opac-bootstrap.po | 49 +-
misc/translator/po/my-staff-help.po | 2 +-
misc/translator/po/my-staff-prog.po | 1278 +++++++++--------
misc/translator/po/nb-NO-marc-MARC21.po | 3 +-
misc/translator/po/nb-NO-marc-NORMARC.po | 2 +-
misc/translator/po/nb-NO-marc-UNIMARC.po | 2 +-
misc/translator/po/nb-NO-opac-bootstrap.po | 54 +-
misc/translator/po/nb-NO-staff-help.po | 2 +-
misc/translator/po/nb-NO-staff-prog.po | 1348 +++++++++---------
misc/translator/po/ne-NE-marc-MARC21.po | 3 +-
misc/translator/po/ne-NE-marc-NORMARC.po | 2 +-
misc/translator/po/ne-NE-marc-UNIMARC.po | 2 +-
misc/translator/po/ne-NE-opac-bootstrap.po | 49 +-
misc/translator/po/ne-NE-staff-help.po | 2 +-
misc/translator/po/ne-NE-staff-prog.po | 1282 +++++++++--------
misc/translator/po/nl-BE-marc-MARC21.po | 3 +-
misc/translator/po/nl-BE-marc-NORMARC.po | 2 +-
misc/translator/po/nl-BE-marc-UNIMARC.po | 2 +-
misc/translator/po/nl-BE-opac-bootstrap.po | 54 +-
misc/translator/po/nl-BE-staff-help.po | 2 +-
misc/translator/po/nl-BE-staff-prog.po | 1305 +++++++++--------
misc/translator/po/nl-NL-marc-MARC21.po | 3 +-
misc/translator/po/nl-NL-marc-NORMARC.po | 2 +-
misc/translator/po/nl-NL-marc-UNIMARC.po | 2 +-
misc/translator/po/nl-NL-opac-bootstrap.po | 54 +-
misc/translator/po/nl-NL-staff-help.po | 2 +-
misc/translator/po/nl-NL-staff-prog.po | 1282 +++++++++--------
misc/translator/po/nn-NO-marc-MARC21.po | 3 +-
misc/translator/po/nn-NO-marc-NORMARC.po | 2 +-
misc/translator/po/nn-NO-marc-UNIMARC.po | 2 +-
misc/translator/po/nn-NO-opac-bootstrap.po | 49 +-
misc/translator/po/nn-NO-staff-help.po | 2 +-
misc/translator/po/nn-NO-staff-prog.po | 1278 +++++++++--------
misc/translator/po/oc-marc-MARC21.po | 3 +-
misc/translator/po/oc-marc-NORMARC.po | 2 +-
misc/translator/po/oc-marc-UNIMARC.po | 2 +-
misc/translator/po/oc-opac-bootstrap.po | 54 +-
misc/translator/po/oc-staff-help.po | 2 +-
misc/translator/po/oc-staff-prog.po | 1351 +++++++++---------
misc/translator/po/pbr-marc-MARC21.po | 3 +-
misc/translator/po/pbr-marc-NORMARC.po | 2 +-
misc/translator/po/pbr-marc-UNIMARC.po | 2 +-
misc/translator/po/pbr-opac-bootstrap.po | 49 +-
misc/translator/po/pbr-staff-help.po | 2 +-
misc/translator/po/pbr-staff-prog.po | 1282 +++++++++--------
misc/translator/po/pl-PL-marc-MARC21.po | 3 +-
misc/translator/po/pl-PL-marc-NORMARC.po | 2 +-
misc/translator/po/pl-PL-marc-UNIMARC.po | 2 +-
misc/translator/po/pl-PL-opac-bootstrap.po | 54 +-
misc/translator/po/pl-PL-staff-help.po | 2 +-
misc/translator/po/pl-PL-staff-prog.po | 1373 +++++++++---------
misc/translator/po/prs-marc-MARC21.po | 3 +-
misc/translator/po/prs-marc-NORMARC.po | 2 +-
misc/translator/po/prs-marc-UNIMARC.po | 2 +-
misc/translator/po/prs-opac-bootstrap.po | 49 +-
misc/translator/po/prs-staff-help.po | 2 +-
misc/translator/po/prs-staff-prog.po | 1282 +++++++++--------
misc/translator/po/pt-BR-marc-MARC21.po | 3 +-
misc/translator/po/pt-BR-marc-NORMARC.po | 2 +-
misc/translator/po/pt-BR-marc-UNIMARC.po | 2 +-
misc/translator/po/pt-BR-opac-bootstrap.po | 54 +-
misc/translator/po/pt-BR-staff-help.po | 2 +-
misc/translator/po/pt-BR-staff-prog.po | 1353 +++++++++---------
misc/translator/po/pt-PT-marc-MARC21.po | 9 +-
misc/translator/po/pt-PT-marc-NORMARC.po | 2 +-
misc/translator/po/pt-PT-marc-UNIMARC.po | 2 +-
misc/translator/po/pt-PT-opac-bootstrap.po | 74 +-
misc/translator/po/pt-PT-staff-help.po | 26 +-
misc/translator/po/pt-PT-staff-prog.po | 1504 ++++++++++----------
misc/translator/po/ro-RO-marc-MARC21.po | 3 +-
misc/translator/po/ro-RO-marc-NORMARC.po | 2 +-
misc/translator/po/ro-RO-marc-UNIMARC.po | 2 +-
misc/translator/po/ro-RO-opac-bootstrap.po | 49 +-
misc/translator/po/ro-RO-staff-help.po | 2 +-
misc/translator/po/ro-RO-staff-prog.po | 1280 +++++++++--------
misc/translator/po/ru-RU-marc-MARC21.po | 3 +-
misc/translator/po/ru-RU-marc-NORMARC.po | 2 +-
misc/translator/po/ru-RU-marc-UNIMARC.po | 2 +-
misc/translator/po/ru-RU-opac-bootstrap.po | 55 +-
misc/translator/po/ru-RU-staff-help.po | 2 +-
misc/translator/po/ru-RU-staff-prog.po | 1308 +++++++++--------
misc/translator/po/rw-RW-marc-MARC21.po | 3 +-
misc/translator/po/rw-RW-marc-NORMARC.po | 2 +-
misc/translator/po/rw-RW-marc-UNIMARC.po | 2 +-
misc/translator/po/rw-RW-opac-bootstrap.po | 49 +-
misc/translator/po/rw-RW-staff-help.po | 2 +-
misc/translator/po/rw-RW-staff-prog.po | 1278 +++++++++--------
misc/translator/po/sd-PK-marc-MARC21.po | 3 +-
misc/translator/po/sd-PK-marc-NORMARC.po | 2 +-
misc/translator/po/sd-PK-marc-UNIMARC.po | 2 +-
misc/translator/po/sd-PK-opac-bootstrap.po | 49 +-
misc/translator/po/sd-PK-staff-help.po | 2 +-
misc/translator/po/sd-PK-staff-prog.po | 1282 +++++++++--------
misc/translator/po/sk-SK-marc-MARC21.po | 3 +-
misc/translator/po/sk-SK-marc-NORMARC.po | 2 +-
misc/translator/po/sk-SK-marc-UNIMARC.po | 2 +-
misc/translator/po/sk-SK-opac-bootstrap.po | 54 +-
misc/translator/po/sk-SK-staff-help.po | 2 +-
misc/translator/po/sk-SK-staff-prog.po | 1348 +++++++++---------
misc/translator/po/sl-SI-marc-MARC21.po | 3 +-
misc/translator/po/sl-SI-marc-NORMARC.po | 2 +-
misc/translator/po/sl-SI-marc-UNIMARC.po | 2 +-
misc/translator/po/sl-SI-opac-bootstrap.po | 49 +-
misc/translator/po/sl-SI-staff-help.po | 2 +-
misc/translator/po/sl-SI-staff-prog.po | 1278 +++++++++--------
misc/translator/po/sq-AL-marc-MARC21.po | 3 +-
misc/translator/po/sq-AL-marc-NORMARC.po | 2 +-
misc/translator/po/sq-AL-marc-UNIMARC.po | 2 +-
misc/translator/po/sq-AL-opac-bootstrap.po | 54 +-
misc/translator/po/sq-AL-staff-help.po | 2 +-
misc/translator/po/sq-AL-staff-prog.po | 1288 +++++++++--------
misc/translator/po/sr-Cyrl-marc-MARC21.po | 3 +-
misc/translator/po/sr-Cyrl-marc-NORMARC.po | 2 +-
misc/translator/po/sr-Cyrl-marc-UNIMARC.po | 2 +-
misc/translator/po/sr-Cyrl-opac-bootstrap.po | 49 +-
misc/translator/po/sr-Cyrl-staff-help.po | 2 +-
misc/translator/po/sr-Cyrl-staff-prog.po | 1282 +++++++++--------
misc/translator/po/sv-SE-marc-MARC21.po | 3 +-
misc/translator/po/sv-SE-marc-NORMARC.po | 2 +-
misc/translator/po/sv-SE-marc-UNIMARC.po | 2 +-
misc/translator/po/sv-SE-opac-bootstrap.po | 54 +-
misc/translator/po/sv-SE-staff-help.po | 2 +-
misc/translator/po/sv-SE-staff-prog.po | 1366 +++++++++---------
misc/translator/po/sw-KE-marc-MARC21.po | 3 +-
misc/translator/po/sw-KE-marc-NORMARC.po | 2 +-
misc/translator/po/sw-KE-marc-UNIMARC.po | 2 +-
misc/translator/po/sw-KE-opac-bootstrap.po | 49 +-
misc/translator/po/sw-KE-staff-help.po | 2 +-
misc/translator/po/sw-KE-staff-prog.po | 1278 +++++++++--------
misc/translator/po/ta-LK-marc-MARC21.po | 3 +-
misc/translator/po/ta-LK-marc-NORMARC.po | 2 +-
misc/translator/po/ta-LK-marc-UNIMARC.po | 2 +-
misc/translator/po/ta-LK-opac-bootstrap.po | 49 +-
misc/translator/po/ta-LK-staff-help.po | 2 +-
misc/translator/po/ta-LK-staff-prog.po | 1282 +++++++++--------
misc/translator/po/ta-marc-MARC21.po | 3 +-
misc/translator/po/ta-marc-NORMARC.po | 2 +-
misc/translator/po/ta-marc-UNIMARC.po | 2 +-
misc/translator/po/ta-opac-bootstrap.po | 49 +-
misc/translator/po/ta-staff-help.po | 2 +-
misc/translator/po/ta-staff-prog.po | 1282 +++++++++--------
misc/translator/po/tet-marc-MARC21.po | 3 +-
misc/translator/po/tet-marc-NORMARC.po | 2 +-
misc/translator/po/tet-marc-UNIMARC.po | 2 +-
misc/translator/po/tet-opac-bootstrap.po | 50 +-
misc/translator/po/tet-staff-help.po | 2 +-
misc/translator/po/tet-staff-prog.po | 1299 +++++++++--------
misc/translator/po/th-TH-marc-MARC21.po | 3 +-
misc/translator/po/th-TH-marc-NORMARC.po | 2 +-
misc/translator/po/th-TH-marc-UNIMARC.po | 2 +-
misc/translator/po/th-TH-opac-bootstrap.po | 49 +-
misc/translator/po/th-TH-staff-help.po | 2 +-
misc/translator/po/th-TH-staff-prog.po | 1282 +++++++++--------
misc/translator/po/tl-PH-marc-MARC21.po | 3 +-
misc/translator/po/tl-PH-marc-NORMARC.po | 2 +-
misc/translator/po/tl-PH-marc-UNIMARC.po | 2 +-
misc/translator/po/tl-PH-opac-bootstrap.po | 49 +-
misc/translator/po/tl-PH-staff-help.po | 2 +-
misc/translator/po/tl-PH-staff-prog.po | 1282 +++++++++--------
misc/translator/po/tr-TR-marc-MARC21.po | 3 +-
misc/translator/po/tr-TR-marc-NORMARC.po | 2 +-
misc/translator/po/tr-TR-marc-UNIMARC.po | 2 +-
misc/translator/po/tr-TR-opac-bootstrap.po | 73 +-
misc/translator/po/tr-TR-staff-help.po | 2 +-
misc/translator/po/tr-TR-staff-prog.po | 1471 ++++++++++---------
misc/translator/po/uk-UA-marc-MARC21.po | 3 +-
misc/translator/po/uk-UA-marc-NORMARC.po | 2 +-
misc/translator/po/uk-UA-marc-UNIMARC.po | 2 +-
misc/translator/po/uk-UA-opac-bootstrap.po | 54 +-
misc/translator/po/uk-UA-staff-help.po | 2 +-
misc/translator/po/uk-UA-staff-prog.po | 1329 +++++++++--------
misc/translator/po/ur-Arab-marc-MARC21.po | 3 +-
misc/translator/po/ur-Arab-marc-NORMARC.po | 2 +-
misc/translator/po/ur-Arab-marc-UNIMARC.po | 2 +-
misc/translator/po/ur-Arab-opac-bootstrap.po | 49 +-
misc/translator/po/ur-Arab-staff-help.po | 2 +-
misc/translator/po/ur-Arab-staff-prog.po | 1282 +++++++++--------
misc/translator/po/vi-VN-marc-MARC21.po | 3 +-
misc/translator/po/vi-VN-marc-NORMARC.po | 2 +-
misc/translator/po/vi-VN-marc-UNIMARC.po | 2 +-
misc/translator/po/vi-VN-opac-bootstrap.po | 54 +-
misc/translator/po/vi-VN-staff-help.po | 2 +-
misc/translator/po/vi-VN-staff-prog.po | 1331 +++++++++--------
misc/translator/po/zh-Hans-CN-marc-MARC21.po | 3 +-
misc/translator/po/zh-Hans-CN-marc-NORMARC.po | 2 +-
misc/translator/po/zh-Hans-CN-marc-UNIMARC.po | 2 +-
misc/translator/po/zh-Hans-CN-opac-bootstrap.po | 52 +-
misc/translator/po/zh-Hans-CN-staff-help.po | 2 +-
misc/translator/po/zh-Hans-CN-staff-prog.po | 1327 +++++++++--------
misc/translator/po/zh-Hans-TW-marc-MARC21.po | 3 +-
misc/translator/po/zh-Hans-TW-marc-NORMARC.po | 2 +-
misc/translator/po/zh-Hans-TW-marc-UNIMARC.po | 2 +-
misc/translator/po/zh-Hans-TW-opac-bootstrap.po | 52 +-
misc/translator/po/zh-Hans-TW-staff-help.po | 2 +-
misc/translator/po/zh-Hans-TW-staff-prog.po | 1339 +++++++++--------
516 files changed, 54935 insertions(+), 57260 deletions(-)
copy misc/release_notes/{release_notes_16_11_11.html => release_notes_16_11_12.html} (63%)
create mode 100644 misc/release_notes/release_notes_16_11_12.md
hooks/post-receive
--
main Koha release repository
More information about the koha-commits
mailing list