October 2025 - Koha-bugs - lists.koha-community.org

[Bug 39602] New: Installer doesn't work with TLS MySQL connection without mutual authentication
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39602 Bug ID: 39602 Summary: Installer doesn't work with TLS MySQL connection without mutual authentication Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Installation and upgrade (web-based installer) Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Bug 36026 implemented TLS connections without mutual authentication by patching Database.pm. While we assumed that Koha always that to create a connection, it's not quite true. Installer.pm also needs to be patched: https://git.koha-community.org/Koha-community/Koha/src/branch/main/C4/Insta… I wonder if it could also be an option to always use Database.pm to centralize this code? -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 1

[Bug 18623] New: Send notification on creation of manual invoice
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18623 Bug ID: 18623 Summary: Send notification on creation of manual invoice Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Notices Assignee: koha-bugs(a)lists.koha-community.org Reporter: lisetteslatah(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org It would be nice if when adding a manual invoice (say for a damaged item) an e-mail notification could be sent. Currently to tell the patron without them logging into the OPAC or coming into the library we have to send the e-mail manually. This is time consuming if we have a lot of damaged items being processed at once. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 8

[Bug 35445] New: OPAC registration verification triggered by email URL scanners
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35445 Bug ID: 35445 Summary: OPAC registration verification triggered by email URL scanners Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com I've noticed that Microsoft Safe Links is triggering /cgi-bin/koha/opac-registration-verify.pl?token=X links. This means that the end user ends up seeing "Registration invalid" because the Microsoft link scanner has already verified the registration by hitting the page with a GET. We should update opac-registration-verify.pl so that it requires the user to click a button for a POST form confirming their registration. (NOTE: Since opac-registration-verify.pl performs a state change, it should be a POST anyway.) -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 26

[Bug 36161] New: ISLDI AuthenticatePatron broken when LDAP enabled and auth falls back to internal connection
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36161 Bug ID: 36161 Summary: ISLDI AuthenticatePatron broken when LDAP enabled and auth falls back to internal connection Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: critical Priority: P5 - low Component: Authentication Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org bug 34893 passes a patron object back from authentication, however, when LDAP is enabled we define the patron from the return of checkpw_ldap When the ldap auth is a failure, we fallback to internal, however, we don't redefine the patron object In the code: 1965 if ( defined $userid ) { 1966 $patron = Koha::Patrons->find( { userid => $userid } ); 1967 $patron = Koha::Patrons->find( { cardnumber => $userid } ) unless $patron; 1968 } . . . 1980 } elsif ( $ldap && defined($password) ) { 1981 my ( $retval, $retcard, $retuserid ); 1982 ( $retval, $retcard, $retuserid, $patron ) = checkpw_ldap(@_); # EXTERNAL AUTH . . . 2026 # INTERNAL AUTH 2027 if ($check_internal_as_fallback) { 2028 @return = checkpw_internal( $userid, $password, $no_set_userenv ); 2029 push( @return, $patron ); 2030 $passwd_ok = 1 if $return[0] > 0; # 1 or 2 2031 } line 1982 undefs, line 2029 returns it In ilsdi: 397 my ($status, $cardnumber, $userid, $patron) = C4::Auth::checkpw( $username, $password ); 398 if ( $status == 1 ) { 399 # Track the login 400 $patron->update_lastseen('connection'); 401 return { id => $patron->borrowernumber }; 402 } We die on undefined patron -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 22

[Bug 39564] New: Enable runtime translations for plugins (Koha::I18N)
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39564 Bug ID: 39564 Summary: Enable runtime translations for plugins (Koha::I18N) Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: I18N/L10N Assignee: julian.maurice(a)biblibre.com Reporter: julian.maurice(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org CC: f.demians(a)tamil.fr, jonathan.druart(a)gmail.com This is an attempt to have translatable plugins (like bug 37472) but using Koha::I18N (runtime translations) See also bug 37472 comment 11 and bug 37472 comment 8 -- You are receiving this mail because: You are watching all bug changes.

1 14

[Bug 40569] New: Quotation marks in series fields (490/830) break search links in XSLT detail view
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40569 Bug ID: 40569 Summary: Quotation marks in series fields (490/830) break search links in XSLT detail view Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Staff interface Assignee: koha-bugs(a)lists.koha-community.org Reporter: slavashishkin(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Search links generated from series fields in the XSLT detail view (MARC 440a/490a/830a) fail when the series title contains quotation marks ("), due to the lack of escaping in the generated URL. Steps to reproduce: 1. Create or edit a bibliographic record (better more than one) 2. In field 490$a or 830$a, enter a series name with quotes, e.g., Test "Series" 3. Save the record 4. On the detail page, click the Series link (generated from the XSLT view) Series: Test "Series" 5. The search fails or returns an error due to a malformed query -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 9

[Bug 32488] New: add indexes for content, media and carrier type
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32488 Bug ID: 32488 Summary: add indexes for content, media and carrier type Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Searching Assignee: koha-bugs(a)lists.koha-community.org Reporter: mathsabypro(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org I don't think there are indexes for those MARC21 fields 336 - Content Type (R) 337 - Media Type (R) 338 - Carrier Type (R) nor for their UNIMARC equivalent 181 - Content form 182 - Media type 183 - type of carrier It could be nice to add those indexes and to add the ability to use them in advanced search -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 21

[Bug 25370] New: Create whitelist of plugins allowed to be installed
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25370 Bug ID: 25370 Summary: Create whitelist of plugins allowed to be installed Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Plugin architecture Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org This feature would provide a whitelist of plugins that are allowed to be installed in Koha. This whitelist would be managed by some kind of administrator*. This feature coupled with Bug 24632 would allow Koha users to only installed certain authentic plugins from trusted providers. (*I've been thinking that a superlibrarian really should be able to configure all aspects of Koha. However, from a vendor perspective, there are quality of service and security risks that comes with that. So perhaps the administrator level should be configurable. Defaulting to superlibrarian but optionally being switched to backend sysadmin for vendors, so that they can have ultimate say, when running on their own hardware.) -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 9

[Bug 31487] New: Add emails to message queue by longoverdue script options
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31487 Bug ID: 31487 Summary: Add emails to message queue by longoverdue script options Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Command-line Utilities Assignee: koha-bugs(a)lists.koha-community.org Reporter: thibaud.guillot(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org CC: robin(a)catalyst.net.nz Some customers request the possibility of sending an additional reminder when processing longoverdues. I think this may be useful for some and given that it remains an option, it does not handicap those who do not want to use it. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 23

[Bug 40297] New: No active MariaDB 10.3 job for main and stable
by bugzilla-daemon＠bugs.koha-community.org 13 Jan '26

13 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40297 Bug ID: 40297 Summary: No active MariaDB 10.3 job for main and stable Change sponsored?: --- Product: Project Infrastructure Version: unspecified Hardware: All OS: All Status: NEW Severity: critical Priority: P5 - low Component: Continuous Integration Assignee: tomascohen(a)gmail.com Reporter: victor(a)tuxayo.net bug 40295 implemented would have prevented Bug 40292. But there is a larger problem of CI not in sync with https://wiki.koha-community.org/wiki/System_requirements_and_recommendations. There might be other hidden v10.3 issues that need to have the core test suite be ran. The sys req wiki page says CI runs against all advertised versions. It might not be worth the massive resources to really honor that phrasing. Which could be relaxed. But ensuring the DB job is ran on the lowest DBMS is worth it. (that's Bug 40295) Maybe not for each stable release. And having the core suite also run for for the lowest DBMS should be worth it too. That's this ticket. -- You are receiving this mail because: You are watching all bug changes.

1 12