February 2025 - Koha-bugs - lists.koha-community.org

[Bug 37017] New: Untranslatable texts in reserve/request.tt
by bugzilla-daemon＠bugs.koha-community.org 23 Dec '25

23 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37017 Bug ID: 37017 Summary: Untranslatable texts in reserve/request.tt Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: I18N/L10N Assignee: koha-bugs(a)lists.koha-community.org Reporter: fridolin.somers(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org CC: f.demians(a)tamil.fr, jonathan.druart(a)gmail.com Continuation of Bug 36872 > git grep '" + "\\n"' origin/main origin/main:koha-tmpl/intranet-tmpl/prog/en/modules/reserve/request.tt: msg = _("- Please select a pickup location for the item" + "\n") origin/main:koha-tmpl/intranet-tmpl/prog/en/modules/reserve/request.tt: msg = _("- Please select a pickup location for this hold" + "\n"); origin/main:koha-tmpl/intranet-tmpl/prog/en/modules/reserve/request.tt: msg = _("- Please select a pickup location for this hold" + "\n"); -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 3

[Bug 29008] New: Avoid warning when checking Koha plugin version
by bugzilla-daemon＠bugs.koha-community.org 23 Dec '25

23 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29008 Bug ID: 29008 Summary: Avoid warning when checking Koha plugin version Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: fridolin.somers(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org In Koha plugins home page, each plugin min/max version is compared with actual Koha version. This uses metadatas assuming there are numbers, like 18.11 or 20.1100000. But source code version is actually YY.MM.XX.YYY.ZZZ. We sometimes find it in plugins, for examle : https://github.com/thekesolutions/koha-plugin-bibliocommons/blob/c2da98f1bd… https://github.com/KohaSuomi/koha-plugin-sms-send-link-mobility-driver/blob… This generates warning : Argument "18.11.01" isn't numeric in numeric lt (<) at /home/koha/src/Koha/Plugins/Base.pm line 377.: src/plugins/plugins-home.pl We should allow this syntax in plugins metadatas. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 37

[Bug 39145] New: Differentiate between deleting or transferring public and shared lists
by bugzilla-daemon＠bugs.koha-community.org 23 Dec '25

23 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39145 Bug ID: 39145 Summary: Differentiate between deleting or transferring public and shared lists Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Lists Assignee: koha-bugs(a)lists.koha-community.org Reporter: m.de.rooy(a)rijksmuseum.nl QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl The pref ListOwnershipUponPatronDeletion currently only has two flavors: - change owner of public or shared lists - delete these lists It would be nice to at least have a third option to change the owner of public lists only and delete the shared lists. This would not add the burden to staff to take care of lists that were shared between some patrons. The option to change owner for shared lists only seems to be less useful. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 40

[Bug 38829] New: SQL Injection in lateissues-export.pl
by bugzilla-daemon＠bugs.koha-community.org 23 Dec '25

23 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38829 Bug ID: 38829 Summary: SQL Injection in lateissues-export.pl Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: critical Priority: P5 - low Component: Serials Assignee: koha-bugs(a)lists.koha-community.org Reporter: zeyadbinkhalid(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Dears, An SQL Injection was found in lateissues-export.pl that allows unauthenticated users (version <= 21.11.x) or authenticated users (version > 21.11.x) to inject arbitrary SQL instructions. The vulnerable function is GetLateOrMissingIssues (C4/Serials.pm) which allows injecting SQL instructions directly without any type of sanitization using the supplierid and/or serialid. Best regards. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 7

[Bug 26673] New: Remove Perl shebangs from Perl modules
by bugzilla-daemon＠bugs.koha-community.org 23 Dec '25

23 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26673 Bug ID: 26673 Summary: Remove Perl shebangs from Perl modules Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org I've noticed a number of Perl modules have shebangs in them. Unless there is a good reason for them to be there, they should be removed. Examples: C4/Barcodes/ValueBuilder.pm C4/SIP/Logger.pm C4/SIP/SIPServer.pm C4/ShelfBrowser.pm Koha/Z3950Responder.pm Koha/Z3950Responder/GenericSession.pm Koha/Z3950Responder/RPN.pm Koha/Z3950Responder/Session.pm Koha/Z3950Responder/ZebraSession.pm -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 34

[Bug 25886] New: libmojolicious-plugin-openapi-perl and libnet-oauth2-authorizationserver-perl unable to install
by bugzilla-daemon＠bugs.koha-community.org 23 Dec '25

23 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25886 Bug ID: 25886 Summary: libmojolicious-plugin-openapi-perl and libnet-oauth2-authorizationserver-perl unable to install Change sponsored?: --- Product: Koha Version: 20.05 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: samanvitha.sateesha(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org I am trying to install koha on linux and I get this bug when I enter the command > sudo apt-get install koha-common koha-common : Depends: libmojolicious-plugin-openapi-perl but it is not going to be installed Depends: libnet-oauth2-authorizationserver-perl but it is not going to be installed E: Unable to correct problems, you have held broken packages. Please help me resolve this bug as I have to work with koha for a project. Regards Samanvitha -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 21

[Bug 20022] New: use Modern::Perl in t (test) perl scripts
by bugzilla-daemon＠bugs.koha-community.org 23 Dec '25

23 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20022 Bug ID: 20022 Summary: use Modern::Perl in t (test) perl scripts Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: aleisha(a)catalyst.net.nz QA Contact: testopia(a)bugs.koha-community.org use Modern::Perl should be used instead of use strict; use warnings; Relevant in: 00-checkdatabase-version.t 00-deprecated.t 00-valid-xml.t AuthoritiesMarc_MARC21.t AuthoritiesMarc_UNIMARC.t Barcodes_EAN13.t Barcodes_annual.t Barcodes_hbyymmincr.t Barcodes_incremental.t Bookseller.t Budgets.t ClassSortRoutine.t ClassSortRoutine_Dewey.t ClassSortRoutine_Generic.t ClassSortRoutine_LCC.t ClassSource.t Contract.t Creators.t EdiInvoice.t Edifact.t Ediorder.t Ediordrsp.t External/Syndetics.t Form_MessagingPreferences.t Heading.t HtmlTags.t Installer_PerlDependencies.t Installer_pm.t ItemCirculationAlertPreference.t Koha_Util_MARC.t Labels.t Labels_split_ccn.t Labels_split_ddcn.t Labels_split_lccn.t Log.t Members_Attributes.t Members_Messaging.t Output.t Output_JSONStream.t Patroncards.t Patroncards_Batch.t Patroncards_Layout.t Patroncards_Lib.t Patroncards_Patroncard.t Patroncards_Profile.t Patroncards_Template.t Print.t QueryParser.t Scheduler.t Scrubber.t Stats.t SuggestionEngine.t TmplToken.t db_dependent/00-strict.t db_dependent/Amazon.t db_dependent/Heading_MARC21.t db_dependent/LDAP/test_ldap_add.pl db_dependent/Languages.t db_dependent/MungeMarcPrice.t db_dependent/Record/Record.t db_dependent/RecordProcessor_EmbedSeeFromHeadings.t db_dependent/Reports.t db_dependent/Service.t db_dependent/SuggestionEngine_ExplodedTerms.t db_dependent/Tags.t smolder_smoke_signal -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 12

[Bug 20019] New: use Modern::Perl in miscellaneous perl scripts
by bugzilla-daemon＠bugs.koha-community.org 23 Dec '25

23 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20019 Bug ID: 20019 Summary: use Modern::Perl in miscellaneous perl scripts Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: aleisha(a)catalyst.net.nz QA Contact: testopia(a)bugs.koha-community.org use Modern::Perl should be used instead of use strict; use warnings; Relevant in: services/itemrecorddisplay.pl suggestion/suggestion.pl tags/list.pl tags/review.pl virtualshelves/sendshelf.pl help.pl changelanguage.pl koha_perl_deps.pl debian/bd-to-depends debian/build-git-snapshot debian/list-deps docs/CAS/CASProxy/examples/koha_webservice.pl docs/CAS/CASProxy/examples/proxy_cas.pl docs/CAS/CASProxy/examples/proxy_cas_callback.pl docs/CAS/CASProxy/examples/proxy_cas_data.pl -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 12

[Bug 37861] New: Fix XSS vulnerability in barcode append function
by bugzilla-daemon＠bugs.koha-community.org 22 Dec '25

22 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37861 Bug ID: 37861 Summary: Fix XSS vulnerability in barcode append function Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: ASSIGNED Severity: normal Priority: P4 Component: Circulation Assignee: artur.norrby(a)gmail.com Reporter: artur.norrby(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com When user inputs were appended directly to the barcode table, the values were not properly escaped, allowing potential XSS attacks. -- You are receiving this mail because: You are watching all bug changes.

1 10

[Bug 37534] New: Add an offset parameter for barcode.pl
by bugzilla-daemon＠bugs.koha-community.org 22 Dec '25

22 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37534 Bug ID: 37534 Summary: Add an offset parameter for barcode.pl Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: baptiste.wojtkowski(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org In order to propose a patch for 8425 and 30056, we need to have the possibility to ask for multiple barcodes without storing a new barcode. See 8425 and 30056 for more information. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 3