April 2024 - Koha-bugs - lists.koha-community.org

[Bug 36192] New: [OMNIBUS] CSRF Protection for Koha
by bugzilla-daemon＠bugs.koha-community.org 27 Mar '26

27 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36192 Bug ID: 36192 Summary: [OMNIBUS] CSRF Protection for Koha Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: critical Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Bug 34478 will be pushed soon, this bug will be for tracking remaining work with dependencies etc, more info to follow -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 156

[Bug 36416] New: Check out using CirculateILL is broken
by bugzilla-daemon＠bugs.koha-community.org 27 Mar '26

27 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36416 Bug ID: 36416 Summary: Check out using CirculateILL is broken Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: ILL Assignee: koha-bugs(a)lists.koha-community.org Reporter: pedro.amorim(a)ptfs-europe.com CC: david(a)davidnind.com, katrin.fischer(a)bsz-bw.de, martin.renvoize(a)ptfs-europe.com, pedro.amorim(a)ptfs-europe.com, tomascohen(a)gmail.com Blocks: 36192 To reproduce: 1) Install FreeForm and enable ILLModule, run: bash <(curl -s https://raw.githubusercontent.com/ammopt/koha-ill-dev/master/start-ill-dev.…) 2) Checkout to branch b_36243 cd /kohadevbox/koha/Koha/Illbackends/FreeForm git checkout b_36243 3) Enable CirculateILL sys pref 4) Create a new ILL request, visit: <staff_url>/cgi-bin/koha/ill/ill-requests.pl?method=create&backend=FreeForm 5) Set "type" = Book and enter '42' on the cardnumber input, click "Create" 6) On the top toolbar, click "Confirm" and confirm the following screen. 7) You now have a new option "Check out" on the toolbar. Click on it. Notice it explodes. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36192 [Bug 36192] [OMNIBUS] CSRF Protection for Koha -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 14

[Bug 36414] New: Consequent workflow stages form submit fail due to CSRF token conflict
by bugzilla-daemon＠bugs.koha-community.org 27 Mar '26

27 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36414 Bug ID: 36414 Summary: Consequent workflow stages form submit fail due to CSRF token conflict Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: ILL Assignee: koha-bugs(a)lists.koha-community.org Reporter: pedro.amorim(a)ptfs-europe.com CC: pedro.amorim(a)ptfs-europe.com, tomascohen(a)gmail.com Blocks: 36192 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36192 [Bug 36192] [OMNIBUS] CSRF Protection for Koha -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 17

[Bug 33260] New: Show message queue on staff interface and make notices printable
by bugzilla-daemon＠bugs.koha-community.org 27 Mar '26

27 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33260 Bug ID: 33260 Summary: Show message queue on staff interface and make notices printable Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Notices Assignee: koha-bugs(a)lists.koha-community.org Reporter: aleisha(a)catalyst.net.nz QA Contact: testopia(a)bugs.koha-community.org Some Koha libraries need to get messages out to borrowers who do not have email addresses, so they need to be able to view generated notices, and optionally print them so they can be delivered offline. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 482

[Bug 36360] New: Link ILL requests to surviving patron record when patrons are merged
by bugzilla-daemon＠bugs.koha-community.org 27 Mar '26

27 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36360 Bug ID: 36360 Summary: Link ILL requests to surviving patron record when patrons are merged Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com When patrons are merged, the ILL requests of the deleted patron records are deleted as well. They should be re-linked to the remaining/winning patron record instead. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 20

[Bug 35748] New: Allow holds to be suspended, unsuspended, or canceled in batches based on branch or patron category code
by bugzilla-daemon＠bugs.koha-community.org 27 Mar '26

27 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35748 Bug ID: 35748 Summary: Allow holds to be suspended, unsuspended, or canceled in batches based on branch or patron category code Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Staff interface Assignee: koha-bugs(a)lists.koha-community.org Reporter: wizzyrea(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Sometimes libraries have to close a branch or altogether, and they'd like to be able to cancel, suspend, and unsuspend holds in a batch. Currently this is achieved through command line database updates which are risky and require professional assistance, especially if your library is hosted. Normally this would be a per branch operation due to the "library is closing" use case, but it might be nice to be able to do this per patron category too. It would also be good if this job were implemented as a long_task background job. Cheers, Liz -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 10

[Bug 30047] New: Add a field to auth_header to record main heading as text string
by bugzilla-daemon＠bugs.koha-community.org 27 Mar '26

27 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30047 Bug ID: 30047 Summary: Add a field to auth_header to record main heading as text string Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Database Assignee: koha-bugs(a)lists.koha-community.org Reporter: andrew(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org SQL queries looking at authority records are complicated by the fact that authorities don't have an equivalent to a biblio's title. It would be helpful to create a new database field (auth_header.main_heading) in which we record a text string. The specific value we record here would be determined by the authority type, following the mappings defined in authtypes.pl. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 37

[Bug 33008] New: Record not indexed in Elasticsearch (ES) if no item attached AND zebra not running
by bugzilla-daemon＠bugs.koha-community.org 27 Mar '26

27 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33008 Bug ID: 33008 Summary: Record not indexed in Elasticsearch (ES) if no item attached AND zebra not running Change sponsored?: --- Product: Koha Version: 22.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Searching Assignee: koha-bugs(a)lists.koha-community.org Reporter: koha(a)trust-box.at QA Contact: testopia(a)bugs.koha-community.org Hi All, Record not indexed in Elasticsearch (ES) if no item attached AND zebra not running + use ES as indexer + turn off zebra with koha-zebra --stop <lib> + if you add a record WITHOUT an item the record will not be found in the search (adding a record WITH an item works as expected) + starting zebra (koha-zebra --start <lib>) fixes the problem ie the record/book is now found even without an item sidenote: + this seems also to be a problem with older koha versions (tested with 21.05) -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 4

[Bug 36078] New: Add hooks to allow cover images from plugins on shelves
by bugzilla-daemon＠bugs.koha-community.org 27 Mar '26

27 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36078 Bug ID: 36078 Summary: Add hooks to allow cover images from plugins on shelves Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: johan.sahlberg(a)tidaholm.se QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl Currently there is a hook for plugins regarding coverimages, but it's not applied on shelves (neither OPAC or staff). -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 2

[Bug 26342] New: Suspended hold not marked filled when patron checks out item
by bugzilla-daemon＠bugs.koha-community.org 26 Mar '26

26 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26342 Bug ID: 26342 Summary: Suspended hold not marked filled when patron checks out item Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: andrew(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com To recreate: - place an item-level hold - suspend the hold - without unsuspending or capturing the hold, check the item out to the patron - the suspended hold remains on the patron account If a hold is not suspended (and not captured) and the patron checks the item out, the hold is marked as filled. Should we do the same on suspended holds? -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 12