June 2025 - Koha-bugs - lists.koha-community.org

[Bug 40045] New: Shortcuts (i.e. Y or N keys) to not require Alt as well as pressing the specific key
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '25

03 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40045 Bug ID: 40045 Summary: Shortcuts (i.e. Y or N keys) to not require Alt as well as pressing the specific key Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: hdunne-howrie(a)westminster.gov.uk QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com In our old library management system, shortcuts for pop up messages would be a single key, i.e. Y key for Yes to proceed. In Koha, you need to press the Alt key as well as the appropriate key for the operation. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3

[Bug 39184] Server-side template injection leading to remote code execution
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '25

03 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39184 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to oldoldstable -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37727] CVE-2024-24337 - Fix CSV formula injection - client side (DataTables)
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '25

03 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37727 --- Comment #26 from David Cook <dcook(a)prosentient.com.au> --- Here's some more info on CSV injection: https://owasp.org/www-community/attacks/CSV_Injection -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37727] CVE-2024-24337 - Fix CSV formula injection - client side (DataTables)
by bugzilla-daemon＠bugs.koha-community.org 03 Jun '25

03 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37727 --- Comment #25 from David Cook <dcook(a)prosentient.com.au> --- (In reply to Emmi Takkinen from comment #24) > This fix has caused a new problem with exporting, see bug 40015. > > > Now we should upgrade to the last version of DataTables and remove this from > > Koha I guess... > > > > It's fixed there. > > So if we update datatables and drop this, would bug 40015 be resolved with > that? Doesn't look like it. The version in dataTables buttons 3.2.0 is the same thing: https://github.com/DataTables/Buttons/blob/master/js/dataTables.buttons.js#… Looks like more thinking will need to be put into this... -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 39798] New: Add ability to shut off modules completely
by bugzilla-daemon＠bugs.koha-community.org 02 Jun '25

02 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39798 Bug ID: 39798 Summary: Add ability to shut off modules completely Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: lucas(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org I am filing this bug after working with a library that is non-circulating, no patrons. It would be quite nice if we could shut off entire modules with an on/off switch. The idea would be, shut off patrons/members: -I would see no links to patrons/members pages. -The search bar at the top of each page would never show 'Search patrons' -System preferences related to patrons/members would not be shown unless the module was turned on. This is kind of pie in the sky type stuff but it would be nice. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 15

[Bug 40038] New: Allow to optionally disable selection of some lost statuses
by bugzilla-daemon＠bugs.koha-community.org 02 Jun '25

02 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40038 Bug ID: 40038 Summary: Allow to optionally disable selection of some lost statuses Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: lisette(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Depending on workflow, some statuses such as Long overdue might be only placed via a cron. Some libraries would like to be able to prevent staff from changing items to those status manually. It might be nice to be able to limit that, or limit it based on a permission for more flexibility. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 1

[Bug 40054] New: `items.itype` should be a FK
by bugzilla-daemon＠bugs.koha-community.org 02 Jun '25

02 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40054 Bug ID: 40054 Summary: `items.itype` should be a FK Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Database Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org I’m filing this report to get the conversation started. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 3

[Bug 40053] New: Koha::Item->effective_not_for_loan_status incorrect?
by bugzilla-daemon＠bugs.koha-community.org 02 Jun '25

02 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40053 Bug ID: 40053 Summary: Koha::Item->effective_not_for_loan_status incorrect? Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org It seems that it only covers the item's item type instead of the effective item type... This could be problematic (i.e. error 500) in some scenarios/pages. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1

[Bug 28762] New: Item status shows incorrectly on course-details.pl
by bugzilla-daemon＠bugs.koha-community.org 02 Jun '25

02 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28762 Bug ID: 28762 Summary: Item status shows incorrectly on course-details.pl Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Staff Client Assignee: koha-bugs(a)lists.koha-community.org Reporter: andrew(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com To recreate: - create a course in course reserves, add an item to it. - confirm your item shows Available for its status on course-details.pl - edit your item to be withdrawn, lost, damaged, notforloan, and restricted use - reload course-details.pl, confirm it still shows available filed bug 28761 for this on the OPAC. On the OPAC, withdrawn, lost, and damaged *do* update the status. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 140

[Bug 39273] New: Search does not handle the diagnosis messages properly
by bugzilla-daemon＠bugs.koha-community.org 02 Jun '25

02 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39273 Bug ID: 39273 Summary: Search does not handle the diagnosis messages properly Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Z39.50 / SRU / OpenSearch Servers Assignee: koha-bugs(a)lists.koha-community.org Reporter: baptiste.wojtkowski(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl Some requests to the BNF catalogue like hereafter one return a <diagnosis> tag, which break Koha's parsing: https://catalogue.bnf.fr/api/SRU?version=1.2&operation=searchRetrieve&query… -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 7