June 2025 - Koha-bugs - lists.koha-community.org

[Bug 37727] CVE-2024-24337 - Fix CSV formula injection - client side (DataTables)
by bugzilla-daemon＠bugs.koha-community.org 02 Jun '25

02 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37727 Emmi Takkinen <emmi.takkinen(a)koha-suomi.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |emmi.takkinen(a)koha-suomi.fi --- Comment #24 from Emmi Takkinen <emmi.takkinen(a)koha-suomi.fi> --- This fix has caused a new problem with exporting, see bug 40015. > Now we should upgrade to the last version of DataTables and remove this from > Koha I guess... > > It's fixed there. So if we update datatables and drop this, would bug 40015 be resolved with that? -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 30699] New: Several id idx
by bugzilla-daemon＠bugs.koha-community.org 02 Jun '25

02 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30699 Bug ID: 30699 Summary: Several id idx Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: fridolin.somers(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org In koha-tmpl/intranet-tmpl/prog/en/includes/search_indexes.inc there is : <select class="advsearch" name="idx" id="idx"> But this include is used several times, so there are several id="idx". We should remove this id. -- You are receiving this mail because: You are watching all bug changes.

1 22

[Bug 35802] New: Note date when patron password was last changed
by bugzilla-daemon＠bugs.koha-community.org 02 Jun '25

02 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35802 Bug ID: 35802 Summary: Note date when patron password was last changed Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: cbrannon(a)cdalibrary.org QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com It would be helpful if the patron data included when the password was last changed. We often have patrons unsure if they had changed their password, or when, and if we had a date, we would be able to tell if had ever been changed, or when it was last changed. This would be helpful so we don't have to dig through logs, and have the information on hand. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3