October 2024 - Koha-bugs - lists.koha-community.org

[Bug 13342] Not logged in user can place a review/comment as a deleted patron
by bugzilla-daemon＠bugs.koha-community.org 18 Oct '24

18 Oct '24

1 0

[Bug 37720] XSS (and bustage) in label creator
by bugzilla-daemon＠bugs.koha-community.org 18 Oct '24

18 Oct '24

1 0

[Bug 37681] XSS vulnerability in item.uri in staff interface
by bugzilla-daemon＠bugs.koha-community.org 18 Oct '24

18 Oct '24

1 0

[Bug 36598] Add CSRF protection to Mojolicious apps
by bugzilla-daemon＠bugs.koha-community.org 18 Oct '24

18 Oct '24

1 0

[Bug 35117] New: get_marc_components and get_marc_volumes should be more consistent
by bugzilla-daemon＠bugs.koha-community.org 18 Oct '24

18 Oct '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35117 Bug ID: 35117 Summary: get_marc_components and get_marc_volumes should be more consistent Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: martin.renvoize(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org Depends on: 35099 Bug 35099 highlighted a number of inconsistencies between these two parallel methods.. we should bring them closer. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35099 [Bug 35099] Cannot load records with invalid marcxml -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 14

[Bug 29382] New: Renewal message is sent twice during auto-renewal
by bugzilla-daemon＠bugs.koha-community.org 18 Oct '24

18 Oct '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29382 Bug ID: 29382 Summary: Renewal message is sent twice during auto-renewal Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Command-line Utilities Assignee: koha-bugs(a)lists.koha-community.org Reporter: joonas.kylmala(a)iki.fi QA Contact: testopia(a)bugs.koha-community.org CC: robin(a)catalyst.net.nz If patron has enabled in the messaging preferences both of the following options Item checkout and renewal Auto renewal then the patron will get two messages, one for the auto-renewal being done for the item, and another message for the item being renewed. Only the Auto-renewal message should be sent. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1

[Bug 22346] New: Populate items.booksellerid when creating items in serials
by bugzilla-daemon＠bugs.koha-community.org 18 Oct '24

18 Oct '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22346 Bug ID: 22346 Summary: Populate items.booksellerid when creating items in serials Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Serials Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org CC: colin.campbell(a)ptfs-europe.com Target Milestone: --- When creating items for serials via the serials module, a lot of the fields are preset, but items.booksellersid is not automatically set to the id of the subscription's vendor. It would be nice if this could be added as it will help with statistics, especially if the vendor changes in the lifetime of a serial subscription. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 2

[Bug 27966] New: Fix plural handling for AUTO_RENEWALS_DGST message
by bugzilla-daemon＠bugs.koha-community.org 18 Oct '24

18 Oct '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27966 Bug ID: 27966 Summary: Fix plural handling for AUTO_RENEWALS_DGST message Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: agustinmoyano(a)theke.io Reporter: agustinmoyano(a)theke.io QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com Depends on: 18532, 27829 AUTO_RENEWALS_DGST does not handle properly plural vs singular error and success messages. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18532 [Bug 18532] Messaging preferences for auto renewals https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27829 [Bug 27829] [OMNIBUS] Remove specific LANG installer data -- You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 20340] New: Ability to use authentication plugin
by bugzilla-daemon＠bugs.koha-community.org 18 Oct '24

18 Oct '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20340 Bug ID: 20340 Summary: Ability to use authentication plugin Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Authentication Assignee: koha-bugs(a)lists.koha-community.org Reporter: alex.arnaud(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org This enhancement intends to allow adding and use authentication plugins. A plugin can be enabled with a system preference (AuthenticationModule) and placed in the <pluginsdir> -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 93

[Bug 38022] New: Identity Provider error 500 on /api
by bugzilla-daemon＠bugs.koha-community.org 18 Oct '24

18 Oct '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38022 Bug ID: 38022 Summary: Identity Provider error 500 on /api Change sponsored?: --- Product: Koha Version: 23.11 Hardware: All URL: <baseurl>/api/v1/public/oauth/login/<code>/opac OS: All Status: NEW Severity: major Priority: P3 Component: Authentication Assignee: koha-bugs(a)lists.koha-community.org Reporter: adifbbk1(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org Created attachment 172100 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=172100&action=e… Screenshot of the bug There are 2 bugs to report. One, which already seems to be reported is, empty fields while editing identity provider in 24.05+ (main reason why koha was not updated and we sticked to stable 23.11) Another bug is related to opening IDP API URL directly in browser such as <baseurl>/api/v1/public/oauth/login/<code>/opac which returns the following result in fresh/incognito session with no stored cookies (as in 23.11.08): { "errors": [ { "message": "Internal Server Error.", "path": "/" } ], "status": 500 } The expected behavior should be redirecting to IDP page (which actually works fine when there are stored browser cookies due to visiting koha homepage for the first time and then trying this link). -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 1