[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Gnumed-announce] important bug warning

From: Karsten Hilbert
Subject: [Gnumed-announce] important bug warning
Date: Tue, 29 Apr 2014 17:28:14 +0200
User-agent: Mutt/1.5.23 (2014-03-12)

This is a warning about a bug potentially affecting clinical data.


        User-entered SOAP data can become misattributed
        to a wrong clinical episode of the same patient.

        Note: There will NOT be any data *loss* or


        Users of the SOAP plugin shown in the attached


        - user enters SOAP into editor for new problem
        - user opens SOAP editor for an existing problem
          of type *health issue* (not episode)
        - user enters SOAP into said editor
        - user presses [Save all] button
        - user enters the *same* string as working
          title for both the entirely new problem as
          well as the to-be-newly-created episode
          of the existing health issue (say "bug test",
          as per screenshot)


        GNUmed will save *both* SOAP entries under
        one and the same episode rather than under
        separate episodes of the same name (one
        unassociated and one under the health issue).
        Whether the one episode will be under the
        existing health issue or not depends on the
        order of editors in the SOAP plugin
        ("new / existing" or "existing / new").


        1) do not use [Save all]

        2) make sure to enter different working
           titles for each new problem

        3) do not open several editors for new
           episodes at once


        There is no sure-fire way to identify whether
        this bug has affected any of your data.

        The attached SQL will uncover candidate rows
        potentially produced from this bug. Note, however,
        that there are also any number of legitimate ways
        for producing rows matching this query.

        You can run this query from your GNUmed client SQL
        analyzer plugin or from the command line:

        $> psql -d gnumed_v19 -U gm-dbo -f 


        GNUmed version 1.4.8 will be released shortly.

GPG key ID E4071346 @
E167 67FD A291 2BEA 73BD  4537 78B9 A9F9 E407 1346

Attachment: screenshot_001.png
Description: PNG image

Attachment: find-potentially_misappropriated_soap.sql
Description: application/sql

reply via email to

[Prev in Thread] Current Thread [Next in Thread]