June 2025 - Koha-bugs - lists.koha-community.org

[Bug 36863] CSRF Plack middleware doesn't handle the CONNECT HTTP method
by bugzilla-daemon＠bugs.koha-community.org 26 Jun '25

26 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36863 David Nind <david(a)davidnind.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs documenting |RESOLVED CC| |david(a)davidnind.com Resolution|--- |FIXED --- Comment #17 from David Nind <david(a)davidnind.com> --- Bug fix, not covered in the manual - no update required. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 34478] Full CSRF protection
by bugzilla-daemon＠bugs.koha-community.org 26 Jun '25

26 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 Bug 34478 depends on bug 36098, which changed state. Bug 36098 Summary: Create Koha::Session module https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36098 What |Removed |Added ---------------------------------------------------------------------------- Status|Needs documenting |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36098] New: Create Koha::Session module
by bugzilla-daemon＠bugs.koha-community.org 26 Jun '25

26 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36098 Bug ID: 36098 Summary: Create Koha::Session module Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Authentication Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org There are times where you need to interact with Koha sessions, but you can't or don't want to load C4::Auth. I propose creating a minimal Koha::Session module, which will initially only have 1 method for fetching a session object, but over time can be built up. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 41

[Bug 36503] New: Add a plugin hook to modify patrons after authentication
by bugzilla-daemon＠bugs.koha-community.org 26 Jun '25

26 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36503 Bug ID: 36503 Summary: Add a plugin hook to modify patrons after authentication Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Authentication Assignee: koha-bugs(a)lists.koha-community.org Reporter: raphael.straub(a)kit.edu QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org This plugin hook allows to change patron data or define the patron based on the authenticated user. We use this hook to map the authenticated user to a patron record we migrated from the former ILS based on data from the identity provider. In Koha we use OIDC/Shibboleth for authentication but we don't have the EPPN in the former ILS and therefore not in the migrated patron record. We have written a plugin that takes the card number from the identity provider, searches a matching patron record in Koha and adds the EPPN to this patron. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 72

[Bug 39184] Server-side template injection leading to remote code execution
by bugzilla-daemon＠bugs.koha-community.org 26 Jun '25

26 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39184 --- Comment #26 from David Cook <dcook(a)prosentient.com.au> --- *** Bug 26663 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 39184] Server-side template injection leading to remote code execution
by bugzilla-daemon＠bugs.koha-community.org 26 Jun '25

26 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39184 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kyle(a)bywatersolutions.com --- Comment #25 from David Cook <dcook(a)prosentient.com.au> --- *** Bug 27759 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37062] New: REST API endpoint expansion for table saved_sql
by bugzilla-daemon＠bugs.koha-community.org 25 Jun '25

25 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37062 Bug ID: 37062 Summary: REST API endpoint expansion for table saved_sql Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: rudy.hinojosa(a)lifeafter.solutions CC: tomascohen(a)gmail.com I'd like to request a CRUD endpoint expansion for table saved_sql. I'm working on a report project that would greatly enhance the end user experience for robust reporting through Jasper. My project is called Koha-Jasper This program will allow a user to import a custom report PAK and automatically build a report for the end user via an API call. I'm currently using a direct sql call, but I don't want this to be the standard way to communicate to the table. More information on this project: https://lightwavelibrary.com/jasper/ -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 3

[Bug 40236] New: Cannot save preferences
by bugzilla-daemon＠bugs.koha-community.org 25 Jun '25

25 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40236 Bug ID: 40236 Summary: Cannot save preferences Change sponsored?: --- Product: Koha Version: 25.05 Hardware: PC OS: Linux Status: NEW Severity: normal Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: agroh(a)asl.uni-kassel.de QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Since update from 24.05 to 25.05 I cannot save changes in admin/preferences.pl. The Saving... button is turning until I Cancel. Changes in admin/systempreferences.pl (Local use) are saved successfully. Any hints welcome, Arne -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 2

[Bug 40239] New: Improve TT validation when saving notice
by bugzilla-daemon＠bugs.koha-community.org 25 Jun '25

25 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40239 Bug ID: 40239 Summary: Improve TT validation when saving notice Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Notices Assignee: koha-bugs(a)lists.koha-community.org Reporter: marion.durand(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org Bug 31211 add a validation system to detect error in notification template when saving, but some errors are not caught by this system: For example, the following model will not generate any error or warning when saving, but it will completely (and silently) prevent sending the notification ``` Hello [% borrower.date_due %] ``` (in general, when trying to access a sub-field/sub-object that doesn't exist) Another example is a model looking like this : ``` Hello [% patron.surname %] ``` This notification is still sent, but the object patron doesn't exist and is not replaced. It would be great to test and warn the librarian if they are using invalid or non-available objects. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 2

[Bug 10190] Overdue notice triggers based on item type
by bugzilla-daemon＠bugs.koha-community.org 25 Jun '25

25 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10190 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Patch doesn't apply |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.

1 0