January 2025 - Koha-bugs - lists.koha-community.org

[Bug 37727] CVE-2024-24337 - Fix CSV formula injection - client side (DataTables)
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37727 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|Pushed to stable |RESOLVED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37727] CVE-2024-24337 - Fix CSV formula injection - client side (DataTables)
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37727 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |Pushed to stable -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 8425] Autobarcode generates duplicate barcodes with AcqCreateItems = on order
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8425 Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |martin.renvoize@ptfs-europe | |.com --- Comment #27 from Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> --- (In reply to Baptiste Wojtkowski (bwoj) from comment #25) > Unless we totally rewrite the code of the module, which will de facto > obsolete this patch, I do not know how we could solve this without that kind > of tweak, but I'm not sure it would increase the technical debt since it is > not more than a fixup to an existing debt and it simply improves the > possibility of existing obsolete code. Understand your point. Adding Martin for another QA point of view. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38916] New: koha custom create page link not working OPAC
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38916 Bug ID: 38916 Summary: koha custom create page link not working OPAC Change sponsored?: --- Product: Koha Version: 24.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: koha-bugs(a)lists.koha-community.org Reporter: lulapercg(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org I have installed Koha version 24.11. I try to add the OPAC About Us page using the Koha "Add Content Pages option. I create a page name about us that is visible in the staff interface but not in OPAC. it comes this An error has occurred! Error 404 This message may have been caused by any of the following reasons: You made use of an external link to an item that is no longer available You followed an outdated link e.g. from a search engine or a bookmark You tried to access a page that needs authentication An internal link in the client is broken and the page does not exist -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1

[Bug 38897] New: Error_Key is stored in legacy trusted.gpg keyring
by bugzilla-daemon＠bugs.koha-community.org 17 Jan '25

17 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38897 Bug ID: 38897 Summary: Error_Key is stored in legacy trusted.gpg keyring Change sponsored?: --- Product: Koha Version: 24.05 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: bugs.koha-community.org Assignee: koha-bugs(a)lists.koha-community.org Reporter: ddvala9(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org I'm trying to update KOHA 24.05.05 to the latest version through the below command: sudo apt-get update but I'm receiving the below error: W: http://debian.koha-community.org/koha/dists/stable/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details. Please help. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3

[Bug 38914] New: REST API account endpoint permissions should not require edit_borrowers permission
by bugzilla-daemon＠bugs.koha-community.org 16 Jan '25

16 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38914 Bug ID: 38914 Summary: REST API account endpoint permissions should not require edit_borrowers permission Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: tomascohen(a)gmail.com The patrons endpoint now requires only 'list_borrowers' for GET requests The patrons/account endpoint requires "edit_borrowers" and "updatecharges:remaining_permissions" which is really view only The edit_borrowers in the second should be "list_borrowers" so that outside systems can view charges without needing to be able to edit patrons. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1

[Bug 37412] New: Style placeholder text in the OPAC
by bugzilla-daemon＠bugs.koha-community.org 16 Jan '25

16 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37412 Bug ID: 37412 Summary: Style placeholder text in the OPAC Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org Depends on: 36651 Created attachment 169222 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=169222&action=e… Screenshot showing re-styling of placeholder text In order to make the OPAC search bar's placeholder text easily distinguishable from regular text we should style it differently. To avoid using a lighter and thus less readable text color I propose to make the placeholder italic and right-aligned. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36651 [Bug 36651] Add placeholder text to the search bar in the OPAC -- You are receiving this mail because: You are watching all bug changes.

1 25

[Bug 38909] New: Add method for converting ISBN13 to ISBN10 within a slip
by bugzilla-daemon＠bugs.koha-community.org 16 Jan '25

16 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38909 Bug ID: 38909 Summary: Add method for converting ISBN13 to ISBN10 within a slip Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Notices Assignee: koha-bugs(a)lists.koha-community.org Reporter: andrew(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: lucas(a)bywatersolutions.com, nick(a)bywatersolutions.com Working with custom slips as introduced in Bug 32986, we want to put cover images for checked out items into the slip. Most cover providers allow retrieval by ISBN, but differ in whether they want ISBN-10 or ISBN-13. It'd be great to have a method to do this within a slip. It could be something within the slip generation code or within the biblioitems object. Either way, it'd be easier than putting a bunch of JS or TT into the slip. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1

[Bug 23776] New: API comparative documentation for tierce application
by bugzilla-daemon＠bugs.koha-community.org 16 Jan '25

16 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23776 Bug ID: 23776 Summary: API comparative documentation for tierce application Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST api Assignee: koha-bugs(a)lists.koha-community.org Reporter: claire.hernandez(a)biblibre.com Work in progess: https://wiki.koha-community.org/wiki/API_comparative_usages -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 4

[Bug 15461] Add shelving location to holdings table as a separate column
by bugzilla-daemon＠bugs.koha-community.org 16 Jan '25

16 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15461 --- Comment #48 from Lucas Gass (lukeg) <lucas(a)bywatersolutions.com> --- Created attachment 176669 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=176669&action=e… Bug 15461: Fix typo in items/catalogue_detail.inc -- You are receiving this mail because: You are watching all bug changes.

1 0