August 2025 - Koha-bugs - lists.koha-community.org

[Bug 37861] New: Fix XSS vulnerability in barcode append function
by bugzilla-daemon＠bugs.koha-community.org 22 Dec '25

22 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37861 Bug ID: 37861 Summary: Fix XSS vulnerability in barcode append function Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: ASSIGNED Severity: normal Priority: P4 Component: Circulation Assignee: artur.norrby(a)gmail.com Reporter: artur.norrby(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com When user inputs were appended directly to the barcode table, the values were not properly escaped, allowing potential XSS attacks. -- You are receiving this mail because: You are watching all bug changes.

1 10

[Bug 37534] New: Add an offset parameter for barcode.pl
by bugzilla-daemon＠bugs.koha-community.org 22 Dec '25

22 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37534 Bug ID: 37534 Summary: Add an offset parameter for barcode.pl Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: baptiste.wojtkowski(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org In order to propose a patch for 8425 and 30056, we need to have the possibility to ask for multiple barcodes without storing a new barcode. See 8425 and 30056 for more information. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 3

[Bug 23218] New: Batch patron modification empty attribute causes improper handling of values
by bugzilla-daemon＠bugs.koha-community.org 22 Dec '25

22 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23218 Bug ID: 23218 Summary: Batch patron modification empty attribute causes improper handling of values Change sponsored?: --- Product: Koha Version: 18.11 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com Target Milestone: --- https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19673 introduced an empty option for Attribute in the Batch Patron Modification. If you leave "Attribute" empty and click "New", you'll get a new row where you can choose an attribute and specify a value. When you hit save, the value won't be recorded against the attribute though, because the indexes in the patron_attributes and patron_attributes_value arrays will be out of sync. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 19

[Bug 30255] New: Allow skipping "list" step for record batch modification/deletion
by bugzilla-daemon＠bugs.koha-community.org 20 Dec '25

20 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30255 Bug ID: 30255 Summary: Allow skipping "list" step for record batch modification/deletion Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: koha-bugs(a)lists.koha-community.org Reporter: glasklas(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org We encountered an issue using the Batch record modification/deletion-tools for a very large number of records. The "list" step where records can be optionally excluded is not relevant in our use-case and takes forever to load. This patch adds an option for skipping this step and directly enqueue the job for all specified records. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 36

[Bug 27254] New: Damaged items need more control over holds
by bugzilla-daemon＠bugs.koha-community.org 19 Dec '25

19 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27254 Bug ID: 27254 Summary: Damaged items need more control over holds Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Hold requests Assignee: koha-bugs(a)lists.koha-community.org Reporter: cbrannon(a)cdalibrary.org QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Currently, NOT_LOAN is setup so that negative values will allow holds and positive values will not. DAMAGED does not have this functionality, to my knowledge. AllowHoldsOnDamagedItems gives you an ON/OFF setting for DAMAGED items. It would be great if we did away with AllowHoldsOnDamagedItems and instead DAMAGED would function the same as NOT_LOAN in terms of positive and negative values distinguishing whether or not the item can be put on hold. This way, a library can determine if a damaged item is a lost cause and change it to a damaged status that can't be held. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 4

[Bug 40405] New: systempreferences.value cannot be set to NULL
by bugzilla-daemon＠bugs.koha-community.org 19 Dec '25

19 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40405 Bug ID: 40405 Summary: systempreferences.value cannot be set to NULL Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: jonathan.druart(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Blocks: 25515 Some sysprefs have NULL as their default value, and systempreferences.value allows NULL values. However C4::Context->set_preference does not unset a syspref if "undef" is passed. Additionally some of the sysprefs that have NULL as default will generate warnings in the logs (and test suite output). opac/opac-suggestions.pl: for my $f ( split( /\s*\,\s*/, C4::Context->preference("OPACSuggestionUnwantedFields") ) ) { Here is the current list: +-------------------------------+-------+ | variable | value | +-------------------------------+-------+ | decreaseLoanHighHoldsDuration | NULL | | decreaseLoanHighHoldsValue | NULL | | ILLHiddenRequestStatuses | NULL | | ILLOpacbackends | NULL | | ILLSendStaffNotices | NULL | | ListOwnerDesignated | NULL | | MarcFieldDocURL | NULL | | MaxFine | NULL | | OPACSuggestionUnwantedFields | NULL | | ReportsExportLimit | NULL | | SerialsSearchResultsLimit | NULL | +-------------------------------+-------+ Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25515 [Bug 25515] [OMNIBUS] Remove warnings and errors from tests output -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 23

[Bug 30041] New: Add MARC and Card preview to biblio search results
by bugzilla-daemon＠bugs.koha-community.org 19 Dec '25

19 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30041 Bug ID: 30041 Summary: Add MARC and Card preview to biblio search results Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: aleisha(a)catalyst.net.nz QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl The cataloguing search (which searches both the catalogue and the reservoir) provides options for both a MARC preview and Card preview for each search result. These options would be useful to show on the normal biblio search results ('search the catalogue'). -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 8

[Bug 34978] New: Add --include and --exclude options to install_plugins.pl to choose the plugins to install
by bugzilla-daemon＠bugs.koha-community.org 18 Dec '25

18 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34978 Bug ID: 34978 Summary: Add --include and --exclude options to install_plugins.pl to choose the plugins to install Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Plugin architecture Assignee: koha-bugs(a)lists.koha-community.org Reporter: emily-rose.francoeur(a)inLibro.com QA Contact: testopia(a)bugs.koha-community.org It would be great to be able to choose which plugins to install and which ones not to install when using the install_plugins.pl script([Koha]/misc/devel/install_plugins.pl). The --include option would take a list of plugins and only install those. The --exclude option would take a list of plugins and install all plugins except those. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 63

[Bug 39616] New: Add ability to search by Vendor ID
by bugzilla-daemon＠bugs.koha-community.org 18 Dec '25

18 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39616 Bug ID: 39616 Summary: Add ability to search by Vendor ID Change sponsored?: --- Product: Koha Version: 24.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: angela.berrett(a)familysearch.org QA Contact: testopia(a)bugs.koha-community.org The Acquisitions module only allows a search of Vendors by Name, not ID number. We have 224 vendors with no names, but we can't search for them as there are too many in our system and it times out on a blank search. We can get the ID via a report, but we don't have a way to access the vendor account page to modify or delete it with only the ID number. Also, the vendor ID is populated in the item record. If you find that ID, then you would be able to search by it on items that does not have acquisition details linked to the item in the Holdings table. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 3

[Bug 40724] New: Record diff in branchtransfer logs
by bugzilla-daemon＠bugs.koha-community.org 18 Dec '25

18 Dec '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40724 Bug ID: 40724 Summary: Record diff in branchtransfer logs Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: koha-bugs(a)lists.koha-community.org Reporter: andrew(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Depends on: 32034 Blocks: 37940 It would be nice to have a diff for the transfer logs. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32034 [Bug 32034] Library branch transfers should be in the action logs https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37940 [Bug 37940] [OMNIBUS] All modification logged via action logs should include original to create JSON diff -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 2