April 2025 - Koha-bugs - lists.koha-community.org

[Bug 37206] New: Removing an item from a label batch should be a CSRF-protected POST operation
by bugzilla-daemon＠bugs.koha-community.org 18 Apr '25

18 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37206 Bug ID: 37206 Summary: Removing an item from a label batch should be a CSRF-protected POST operation Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: ASSIGNED Severity: normal Priority: P5 - low Component: Label/patron card printing Assignee: oleonard(a)myacpl.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org Depends on: 36192 >From Labels -> Manage label batches -> Edit batch, the list of items in the batch has a "Delete" button for each item. Currently it's a GET operation sent via a link, but I think that should be POSTed. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36192 [Bug 36192] [OMNIBUS] CSRF Protection for Koha -- You are receiving this mail because: You are watching all bug changes.

1 13

[Bug 37252] New: Saving an authority record as MADS (XML) fails
by bugzilla-daemon＠bugs.koha-community.org 18 Apr '25

18 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37252 Bug ID: 37252 Summary: Saving an authority record as MADS (XML) fails Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: MARC Authority data support Assignee: koha-bugs(a)lists.koha-community.org Reporter: phil(a)chetcolibrary.org QA Contact: testopia(a)bugs.koha-community.org Depends on: 37235 Until it has been pushed, you need the patch for bug 37235 to see this, since otherwise you're stopped by a CSRF-related error first. Steps to reproduce: 1. View details for an authority record, e.g. /cgi-bin/koha/authorities/detail.pl?authid=620 2. tail -f /var/log/koha/kohadev/plack-intranet-error.log 3. In the authority details page, Save - MADS (XML) Expected result is a downloaded file of more than zero bytes, Actual result is a zero byte file and the following logged errors: [WARN] XSLT::Base: Unknown IO errorI/O warning : failed to load external entity "http://www.loc.gov/marcxml/xslt/MARC21slimUtils.xsl" compilation error: file /kohadevbox/koha/koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2MADS.xsl element include xsl:include : unable to load http://www.loc.gov/marcxml/xslt/MARC21slimUtils.xsl at /kohadevbox/koha/Koha/XSLT/Base.pm line 346. [WARN] Use of uninitialized value $marc in print at /kohadevbox/koha/authorities/export.pl line 47. If you eventually notice that the URL, which seems to work fine in a browser, is actually sending a 301 to http://www.loc.gov/standards/marcxml/xslt/MARC21slimUtils.xsl and you update the include to that, it still fails. As bug 29556 pointed out, the MADS XSLT is alone in including MARC21slimUtils.xsl from LoC, all our others include our local copy. If we want to have a canary in the coal mine that tells us when that fails, we should make it something which will actually produce a visible failure, not this spectacularly obscure authority format download. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37235 [Bug 37235] Download single authority results in 500 error -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 21

[Bug 37235] New: Download single authority results in 500 error
by bugzilla-daemon＠bugs.koha-community.org 18 Apr '25

18 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37235 Bug ID: 37235 Summary: Download single authority results in 500 error Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: MARC Authority data support Assignee: koha-bugs(a)lists.koha-community.org Reporter: caroline.cyr-la-rose(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org I'm getting a 500 error when I try to "save" (i.e. download) an authority record. To recreate: 1. Go to Authorities 2. Search for an authority 3. Click on the authority header to access the detailed record page (authorities/detail.pl?authid=XXXX) 4. Click Save > MADS (XML) --> Error 500 5. Redo step 4 with the other formats (MARCXML, MARC (non-Unicode/MARC-8), MARC (Unicode/UTF8) --> Error 500 I get this on KTD with both Zebra and ES7. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 18

[Bug 37270] New: Deleting a report from the actions menu on a list of saved reports does not work
by bugzilla-daemon＠bugs.koha-community.org 18 Apr '25

18 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37270 Bug ID: 37270 Summary: Deleting a report from the actions menu on a list of saved reports does not work Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Reports Assignee: koha-bugs(a)lists.koha-community.org Reporter: phil(a)chetcolibrary.org QA Contact: testopia(a)bugs.koha-community.org Depends on: 36192 You need at least one saved report to see this. Reports - Use saved - for any listed report in the Actions column click the up-arrow next to Run and choose Delete. Confirm that you want to delete, then nothing happens. Our JS thinks that the DOM is <form> </form> <a href="#" class="delete" title="Delete this saved report"><i class="fa fa-trash-can"></i> Delete</a> And attaches a click handler to .delete at https://git.koha-community.org/Koha-community/Koha/src/commit/10853d1edc9c3… which does `return $(this).siblings('form').submit()`. That fails because there's already a form open above that form, and you can't nest forms, so the form we want to submit doesn't exist because the browser has ignored that tag. Now that we have form-submit.js, we should just use it instead. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36192 [Bug 36192] [OMNIBUS] CSRF Protection for Koha -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 30

[Bug 37261] New: api/v1/extended_attribute_types does not return additional fields for unmapped tablenames
by bugzilla-daemon＠bugs.koha-community.org 18 Apr '25

18 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37261 Bug ID: 37261 Summary: api/v1/extended_attribute_types does not return additional fields for unmapped tablenames Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: pedro.amorim(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org CC: tomascohen(a)gmail.com -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 17

[Bug 36054] New: Setting MARC 005 as not required causes save error in Advanced Editor and not Basic Editor
by bugzilla-daemon＠bugs.koha-community.org 18 Apr '25

18 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36054 Bug ID: 36054 Summary: Setting MARC 005 as not required causes save error in Advanced Editor and not Basic Editor Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: esther.melander(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl This requires having some bib records where the 005 is blank or missing. To recreate: 1. Edit the default framework and uncheck the mandatory box for the 005 and save. 2. Find a bib record with a missing/blank 005 and edit the record in the basic editor. 3. See that the 005 is blank and is not required. Save The record saves as it should. 4. Now edit the record again and switch to the Advanced Editor. 5. See that the 005 is missing. 6. Save. Save fails and gives an error statement "Record structure invalid, cannot save." Ideally records should have a 005. If this is a truly required field for Koha to function, then the ability to mark the field not mandatory should be disabled. Along with this, the ability to delete the field should be prevented (see bug 35135). Regardless, this is inconsistent behavior where it works in one place and not another. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 24

[Bug 37648] New: connexion_import_daemon.pl should set defaults for overlay, nomatch and item action and provide a warning
by bugzilla-daemon＠bugs.koha-community.org 18 Apr '25

18 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37648 Bug ID: 37648 Summary: connexion_import_daemon.pl should set defaults for overlay, nomatch and item action and provide a warning Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Command-line Utilities Assignee: koha-bugs(a)lists.koha-community.org Reporter: paul.derscheid(a)lmscloud.de QA Contact: testopia(a)bugs.koha-community.org CC: robin(a)catalyst.net.nz I think these three config fields should be set to 'ignore' by default if undef and a warning should be emitted that this was set automatically. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 6

[Bug 38230] New: Restore Import Success message with OCLC Gateway import
by bugzilla-daemon＠bugs.koha-community.org 18 Apr '25

18 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38230 Bug ID: 38230 Summary: Restore Import Success message with OCLC Gateway import Change sponsored?: --- Product: Koha Version: 24.05 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: flyingendpaper(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl This depends on Bug 37543, which fixed the broken OCLC Connexion Daemon / Gateway, but changed the "import success" message that appears in the OCLC Connexion Client software. It used to be, e.g. (example from our Koha catalog): Success. Batch number 1217 - biblio record number 41595added to Koha. http://staff.keys.bywatersolutions.com/cgi-bin/koha/catalogue/detail.pl?bib… This was really helpful, because one could copy the record URL and paste it into the staff interface to go directly to the record. Bug 37543, though, causes a message like this to be displayed: "Success. Batch number 8989 - biblio record number HASH(0x5571396a8fd8) added to Koha" And that's not as helpful, because there are no handy URLs--one has to go to: Cataloging Manage staged records And then look at the right batch number to view the imported record. Thank you!! -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 6

[Bug 37543] New: connexion_import_daemon.pl stopped working in 24.05 due to API changes related to Csrf-Token
by bugzilla-daemon＠bugs.koha-community.org 18 Apr '25

18 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37543 Bug ID: 37543 Summary: connexion_import_daemon.pl stopped working in 24.05 due to API changes related to Csrf-Token Change sponsored?: --- Product: Koha Version: 24.05 Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Command-line Utilities Assignee: koha-bugs(a)lists.koha-community.org Reporter: rudolfbyker(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: robin(a)catalyst.net.nz Since the changes mentioned at https://wiki.koha-community.org/wiki/Koha_/svc/_HTTP_API#Changes_coming_in_… in version 24.05, the `connexion_import_daemon.pl` no longer works. Related discussions: - https://chat.koha-community.org/koha-community/pl/o8yasuqrwpf8upynroed5fqz1o - https://chat.koha-community.org/koha-community/pl/kyszm1fmr3dp5gd75demen3fpe I'll try to fix it, but I'm very inexperienced with perl, although I know lots of other languages. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 44

[Bug 37450] New: Clicking Close Basket from the list of baskets does nothing
by bugzilla-daemon＠bugs.koha-community.org 18 Apr '25

18 Apr '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37450 Bug ID: 37450 Summary: Clicking Close Basket from the list of baskets does nothing Change sponsored?: --- Product: Koha Version: 24.05 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: kelly(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org >From the list of baskets with a specific vendor, there is an action button which will allow users to close the basket. Clicking on this option will not close the basket and brings the user to a page koha/acqui/basket.pl?op=close&basketno=84&booksellerid=6 And the page will display this: New Basket () for There are still Basket options on this page, but choosing to close the basket, will give the message, Vendor Not Found. Choosing to edit the basket from this page, will give a 500 error. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 16