May 2025 - Koha-bugs - lists.koha-community.org

[Bug 11583] Add WYSIWYG editor for HTML notices/letters
by bugzilla-daemon＠bugs.koha-community.org 02 May '25

02 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11583 Brendan Lawlor <blawlor(a)clamsnet.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |blawlor(a)clamsnet.org -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36253] New: Port default acquisition notices to Template Toolkit syntax
by bugzilla-daemon＠bugs.koha-community.org 02 May '25

02 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36253 Bug ID: 36253 Summary: Port default acquisition notices to Template Toolkit syntax Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Keywords: roadmap_24_05 Severity: enhancement Priority: P5 - low Component: Notices Assignee: koha-bugs(a)lists.koha-community.org Reporter: emily.lamancusa(a)montgomerycountymd.gov QA Contact: testopia(a)bugs.koha-community.org Blocks: 15278 There are 3 acquisitions notices that still use "hungry alligator" syntax: ACQ_NOTIF_ON_RECEIV ACQCLAIM ACQORDER ACQCLAIM and ACQORDER are very similar, and it would make sense to do them together. ACQ_NOTIF_ON_RECEIV is pretty brief and simple, so we might as well bundle it in too. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15278 [Bug 15278] [Omnibus] Port default slips and notices from bespoke syntax to Template Toolkit -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 2

[Bug 36417] New: Add TT notices to acquisition claim notices
by bugzilla-daemon＠bugs.koha-community.org 02 May '25

02 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36417 Bug ID: 36417 Summary: Add TT notices to acquisition claim notices Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Notices Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org Depends on: 31858 It would be great if we could make TT usable in the Acq claim notices the same way we did for ACQORDER in bug 31858. The notices are usually very similar and require the same access to data. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31858 [Bug 31858] TT syntax for ACQORDER notices -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 1

[Bug 36818] Remote-Code-Execution (RCE) in upload-cover-image.pl (CVE-2024-36057)
by bugzilla-daemon＠bugs.koha-community.org 02 May '25

02 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36818 --- Comment #34 from Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> --- *** Bug 27941 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 36867] ILS-DI AuthorizedIPs should deny explicitly except those listed
by bugzilla-daemon＠bugs.koha-community.org 02 May '25

02 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36867 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|additional_work_needed | --- Comment #30 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Follow-up pushed! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 31988] New: manager.pl is only user for "Catalog by item type" report
by bugzilla-daemon＠bugs.koha-community.org 02 May '25

02 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31988 Bug ID: 31988 Summary: manager.pl is only user for "Catalog by item type" report Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Reports Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org This is an odd script - it looks like the intent was to have one script that could call various reports. We have a single "plugin" for the reports - itemtypes.plugin We should convert this to a regular report script -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 23

[Bug 38092] New: members/files, acqui/invoice-files: Could create memory issues, handling larger files
by bugzilla-daemon＠bugs.koha-community.org 02 May '25

02 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38092 Bug ID: 38092 Summary: members/files, acqui/invoice-files: Could create memory issues, handling larger files Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: m.de.rooy(a)rijksmuseum.nl QA Contact: testopia(a)bugs.koha-community.org Triggered by looking at bug 37365, I notice that members/files does read the contents of a file into a variable before uploading it. while (<$uploaded_file>) { $file_content .= $_; } This is passed to Koha/Patron/Files, sub AddFile. Which does a direct SQL INSERT into borrower_files without checking size etc. Note that we also have Koha/Misc/Files.pm which also has a similar sub AddFile and contains code to insert file contents into table misc_files. Seems to be used in ACQ context only. So we have the same kind of problem in acqui/invoice-files.pl: my $file_content = do { local $/; <$uploaded_file>; }; No checks either. The scope of this problem is somehow reduced by the fact that we luckily have no OPAC counterparts for those actions. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 5

[Bug 39808] New: Updating configuration on plugin does not change the last updated date
by bugzilla-daemon＠bugs.koha-community.org 02 May '25

02 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39808 Bug ID: 39808 Summary: Updating configuration on plugin does not change the last updated date Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: cbrannon(a)cdalibrary.org QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com I just made an update to the OpenAthens plugin configuration and the last updated date did not change. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1

[Bug 32962] New: Add ability to enable/disable Authorities module
by bugzilla-daemon＠bugs.koha-community.org 02 May '25

02 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32962 Bug ID: 32962 Summary: Add ability to enable/disable Authorities module Change sponsored?: --- Product: Koha Version: 21.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: catrina(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com The Authorities module can be hidden in the staff interface by using IntranetUserJS, but just like the following modules/features can be enabled/disabled or set to use/don't use, it would be nice to have this functionality in system preferences to turn on/off the Authorities module as well. Existing features set in system preferences: ERMModule (Enable/Disable) CurbsidePickup (Enable/Disable) ILLModule (Enable/Disable) UseCourseReserves (Use/Don’t Use) EnablePointOfSale (Enable/Disable) -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3

[Bug 32963] New: Add ability to enable/disable Acquisitions module
by bugzilla-daemon＠bugs.koha-community.org 02 May '25

02 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32963 Bug ID: 32963 Summary: Add ability to enable/disable Acquisitions module Change sponsored?: --- Product: Koha Version: 21.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: catrina(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com The Acquisitions module can be hidden in the staff interface by using IntranetUserJS, but just like the following modules/features can be enabled/disabled or set to use/don't use, it would be nice to have this functionality in system preferences to turn on/off the Acquisitions module as well. Existing features set in system preferences: ERMModule (Enable/Disable) CurbsidePickup (Enable/Disable) ILLModule (Enable/Disable) UseCourseReserves (Use/Don’t Use) EnablePointOfSale (Enable/Disable) -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 6