http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
Chris Cormack changed:
What|Removed |Added
Attachment #6404|0 |1
is obsolete|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
--- Comment #13 from Chris Cormack 2011-11-25
07:44:12 UTC ---
Created attachment 6405
--> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6405
[3.2.x] Bug 6629 vulnerability fix
--
Configure bugmail:
http://bugs.koha-
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
--- Comment #12 from Chris Cormack 2011-11-25
07:41:51 UTC ---
Yes the patch for master does sanitize HTTP_ACCEPT_LANGUAGE because the
sanitize is done in getlanguagecookie, ill update the 3.4.x to do that also
--
Configure bugmail
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
--- Comment #11 from Chris Cormack 2011-11-25
07:39:20 UTC ---
Created attachment 6404
--> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6404
[3.4.x] Bug 6629 fix for vulnerability
--
Configure bugmail:
http://bugs.k
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
--- Comment #10 from Frère Sébastien Marie
2011-11-25 07:36:52 UTC ---
In order to check the patch against the vulnerability, here a little poc using
curl (a shell tool):
> curl -v -b 'KohaOpacLanguage=../../../../../../../../etc/pas
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
--- Comment #9 from Frère Sébastien Marie 2011-11-25
07:16:06 UTC ---
about the patch (6403):
- I think we should also remove (or sanitize) $ENV{ HTTP_ACCEPT_LANGUAGE }, as
is it a user controlled string also.
- the regexp is not a
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
Katrin Fischer changed:
What|Removed |Added
CC||katrin.fisc...@bsz-bw.de
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
Katrin Fischer changed:
What|Removed |Added
Attachment #6402|0 |1
is obsolete|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
Chris Cormack changed:
What|Removed |Added
Attachment #6401|0 |1
is obsolete|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
Chris Cormack changed:
What|Removed |Added
Attachment #6400|0 |1
is obsolete|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
Chris Cormack changed:
What|Removed |Added
Attachment #6399|0 |1
is obsolete|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
Chris Cormack changed:
What|Removed |Added
Priority|P1 - high |PATCH-Sent
CC
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
Chris Cormack changed:
What|Removed |Added
Attachment #6398|0 |1
is obsolete|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7262
Katrin Fischer changed:
What|Removed |Added
Priority|P5 - low|PATCH-Sent
Patch Statu
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
--- Comment #3 from Frère Sébastien Marie 2011-11-25
05:51:57 UTC ---
Created attachment 6398
--> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6398
quick patch
it is quick patch (not git, sorry: no time now)
--
Conf
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7152
--- Comment #17 from Anand 2011-11-25 05:44:08 UTC ---
Fixed ils_search.
$ curl -H 'content-type: application/json' -d
'{"authors":["test"],"publish_date":null,"title":"Test1","publisher":null,"isbn":["9781935928-324"]}'
http://openli
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
--- Comment #2 from Frère Sébastien Marie 2011-11-25
05:35:18 UTC ---
*** Bug 7265 has been marked as a duplicate of this bug. ***
--
Configure bugmail:
http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email
--- You a
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7265
Frère Sébastien Marie changed:
What|Removed |Added
Status|NEW |RESOLVED
Reso
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629
Frère Sébastien Marie changed:
What|Removed |Added
Priority|P5 - low|P1 - high
--- Comment
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7265
Bug #: 7265
Summary: [security] Local File Inclusion Vulnerability
Classification: Unclassified
Change sponsored?: ---
Product: Koha
Version: rel_3_6
Platform: All
OS/
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7239
Marijana changed:
What|Removed |Added
CC||mglav...@ffzg.hr
--
Configure bug
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4955
Marijana changed:
What|Removed |Added
CC||mglav...@ffzg.hr
--
Configure bug
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3966
Marijana changed:
What|Removed |Added
CC||mglav...@ffzg.hr
--
Configure bug
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5473
Marijana changed:
What|Removed |Added
CC||mglav...@ffzg.hr
--
Configure bug
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6504
Marijana changed:
What|Removed |Added
CC||mglav...@ffzg.hr
--
Configure bug
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7264
Bug #: 7264
Summary: Display information about library on OPAC detail
Classification: Unclassified
Change sponsored?: ---
Product: Koha
Version: master
Platform: All
O
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6504
Srdjan Jankovic changed:
What|Removed |Added
Attachment #6246|0 |1
is obsolete|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7152
--- Comment #16 from Robin Sheat 2011-11-25 02:13:00
UTC ---
I've added the openlibrary.pl file now.
--
Configure bugmail:
http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email
--- You are receiving this mail because
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=1633
Serhij Dubyk changed:
What|Removed |Added
CC||du...@library.lviv.ua
--
Conf
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=1633
Dobrica Pavlinusic changed:
What|Removed |Added
Status|NEW |ASSIGNED
--
Configure b
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6997
Dobrica Pavlinusic changed:
What|Removed |Added
Patch Status|Needs Signoff |Signed Off
--
Configure
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6997
Dobrica Pavlinusic changed:
What|Removed |Added
Attachment #5825|0 |1
is obsolete|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7152
--- Comment #15 from Robin Sheat 2011-11-24 20:55:22
UTC ---
Whoops, the openlibrary.pl file is somewhat important. I'll fix that up soon.
Also note that this is still a work in progress, I haven't had a lot of time to
finish it up si
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6997
Robin Sheat changed:
What|Removed |Added
CC||ro...@catalyst.net.nz
--
Confi
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7152
--- Comment #14 from Dobrica Pavlinusic 2011-11-24 20:42:42
UTC ---
Test scenario:
1. open OpenLibrary account with name ending in Bot to indicate it's a robot
2. edit OpenLibraryUsername and OpenLibraryPassword system preferences
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7152
--- Comment #13 from Dobrica Pavlinusic 2011-11-24 20:16:43
UTC ---
Hm? Example included above works, but when I remove slashes it doesn't:
$ curl -H 'content-type: application/json' -d
'{"authors":["test"],"publish_date":null,"title
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6929
Dobrica Pavlinusic changed:
What|Removed |Added
Status|ASSIGNED|RESOLVED
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6997
Dobrica Pavlinusic changed:
What|Removed |Added
CC||dpav...@rot13.org
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6929
Dobrica Pavlinusic changed:
What|Removed |Added
Depends on||6997
--
Configure bugma
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7152
--- Comment #12 from Anand 2011-11-24 18:30:24 UTC ---
The ils_search API is already improved to handle hyphens in the ISBNs. It even
handles the isbn-10 to isbn-13 (and vice-versa) conversion internally.
We are working on implementin
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7152
--- Comment #11 from Dobrica Pavlinusic 2011-11-24 18:15:49
UTC ---
Exact ISBN matches are problem for Koha side. We can't re-create exact format
since parts of it denote country, publisher, edition and even if we know where
to insert
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7263
Juan Romay Sieira changed:
What|Removed |Added
Status|NEW |ASSIGNED
Assigned
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7263
Bug #: 7263
Summary: Determine maximum length of some fields or subfields
when cataloguing
Classification: Unclassified
Change sponsored?: ---
Product: Koha
Version:
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7262
Juan Romay Sieira changed:
What|Removed |Added
Status|NEW |ASSIGNED
Assigned
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7262
Katrin Fischer changed:
What|Removed |Added
CC||katrin.fisc...@bsz-bw.de
---
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7153
Dobrica Pavlinusic changed:
What|Removed |Added
CC||dpav...@rot13.org
--- Co
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7262
Bug #: 7262
Summary: No calendar present in holidays module when there are
quotes in title or description
Classification: Unclassified
Change sponsored?: ---
Product: Koha
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7261
Bug #: 7261
Summary: System Preference to select the first day of week
(Sunday or Monday) to use in the calendar (OPAC and
Intranet)
Classification: Unclassified
Chang
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6022
Marijana changed:
What|Removed |Added
CC||mglav...@ffzg.hr
Patch Statu
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6022
Marijana changed:
What|Removed |Added
Attachment #6391|0 |1
is obsolete|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7250
Jared Camins-Esakov changed:
What|Removed |Added
CC||jcam...@cpbibliography.c
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6894
Paul Poulain changed:
What|Removed |Added
CC||paul.poul...@biblibre.com
---
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6022
Dobrica Pavlinusic changed:
What|Removed |Added
Attachment #4985|0 |1
is obsolete|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6022
--- Comment #7 from Dobrica Pavlinusic 2011-11-24 14:53:46
UTC ---
Created attachment 6391
--> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6391
Bug 6022: Auth_with_ldap check if categorycode is valid
added test scena
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7254
Paul Poulain changed:
What|Removed |Added
CC||paul.poul...@biblibre.com
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7250
--- Comment #5 from Katrin Fischer 2011-11-24
14:32:55 UTC ---
Created attachment 6390
--> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6390
test records
Without the patch the sub is called with wrong parameters - mar
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7257
M. de Rooy changed:
What|Removed |Added
CC||m.de.r...@rijksmuseum.nl
--- Com
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7250
Paul Poulain changed:
What|Removed |Added
Status|NEW |ASSIGNED
CC|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7260
Bug #: 7260
Summary: User should be able to determine the number of search
results per page (OPAC)
Classification: Unclassified
Change sponsored?: ---
Product: Koha
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3388
--- Comment #6 from Katrin Fischer 2011-11-24
13:18:16 UTC ---
Paul, can you push? The PDF should be dealt with in a separate patch. A lot of
libraries don't use PDF printing at all. I think this can be a separate bug.
--
Configure
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4330
Paul Poulain changed:
What|Removed |Added
Patch Status|Passed QA |Patch Pushed
--
Configure bug
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4330
Paul Poulain changed:
What|Removed |Added
CC||paul.poul...@biblibre.com
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5974
Paul Poulain changed:
What|Removed |Added
CC||paul.poul...@biblibre.com
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3388
M. de Rooy changed:
What|Removed |Added
CC|m.de.r...@rijksmuseum.nl|
Platform|PC
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3388
M. de Rooy changed:
What|Removed |Added
CC||m.de.r...@rijksmuseum.nl
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3388
Paul Poulain changed:
What|Removed |Added
Status|NEW |ASSIGNED
--- Comment #5 from P
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7110
M. de Rooy changed:
What|Removed |Added
Version|rel_3_4 |master
Patch Status|Signed
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3388
Paul Poulain changed:
What|Removed |Added
CC||paul.poul...@biblibre.com
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7191
Paul Poulain changed:
What|Removed |Added
CC||paul.poul...@biblibre.com
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6916
--- Comment #14 from Robin Sheat 2011-11-24 12:02:03
UTC ---
Whoops, sorry. After KohaCon I made a list of things to catch up on, and I'd
noted beside this "look at it." I then skim read it, saw it had been pushed,
and thought my note
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6828
Barry Cannon changed:
What|Removed |Added
Attachment #6317|0 |1
is obsolete|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7110
M. de Rooy changed:
What|Removed |Added
CC||m.de.r...@rijksmuseum.nl
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6877
M. de Rooy changed:
What|Removed |Added
CC||m.de.r...@rijksmuseum.nl
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6916
M. de Rooy changed:
What|Removed |Added
Attachment #6316|0 |1
is obsolete|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6916
M. de Rooy changed:
What|Removed |Added
Version|rel_3_8 |master
--
Configure bugmail:
h
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6916
M. de Rooy changed:
What|Removed |Added
Status|RESOLVED|REOPENED
Patch Status|Patc
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7091
Paul Poulain changed:
What|Removed |Added
Version|master |rel_3_6
--- Comment #12 from P
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7073
Paul Poulain changed:
What|Removed |Added
CC||paul.poul...@biblibre.com
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6303
Paul Poulain changed:
What|Removed |Added
Version|master |rel_3_8
Patch Status|Pas
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6035
Serhij Dubyk changed:
What|Removed |Added
CC||du...@library.lviv.ua
--
Conf
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4877
--- Comment #38 from Robin Sheat 2011-11-24 10:10:10
UTC ---
The warning is ok, not exactly sure what causes it, but it doesn't adversely
effect anything.
--
Configure bugmail:
http://bugs.koha-community.org/bugzilla3/userprefs.cgi
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4877
Paul Poulain changed:
What|Removed |Added
Attachment #6003|0 |1
is obsolete|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4877
Paul Poulain changed:
What|Removed |Added
Status|NEW |ASSIGNED
CC|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7242
Paul Poulain changed:
What|Removed |Added
Status|NEW |ASSIGNED
CC|
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6836
--- Comment #17 from Julian Maurice 2011-11-24
08:37:46 UTC ---
Created attachment 6387
--> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6387
Broken display without custom 'sDom' property
(In reply to comment #16)
> >
85 matches
Mail list logo