August 2025 - Koha-bugs - lists.koha-community.org

[Bug 37111] New: OPAC renewal - CSRF "op must be set"
by bugzilla-daemon＠bugs.koha-community.org 04 Aug '25

04 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37111 Bug ID: 37111 Summary: OPAC renewal - CSRF "op must be set" Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: david(a)davidnind.com QA Contact: testopia(a)bugs.koha-community.org In the OPAC, when a patron clicks the "renew" link for an item they get an error: op must be set at /kohadevbox/koha/opac/opac-renew.pl line 36 in (eval) at /kohadevbox/koha/opac/opac-renew.pl line 36 33: my $query = CGI->new; 34: my $op = $query->param('op') || q{}; 35: 36: die "op must be set" unless $op eq 'cud-renew'; ... To replicate (using KTD): 1. Check some items out to a patron 2. Set the username and apssword for the patron so that you can log in as that patron. 3. Log in to the OAPC as that patron. 4. Go to Your account > Summary (the default landing page after you log in). 5. Click "Renew" for one of the items. 6. You get the error as above. -- You are receiving this mail because: You are watching all bug changes.

1 40

[Bug 35984] New: automated static code analysis should include security tests
by bugzilla-daemon＠bugs.koha-community.org 04 Aug '25

04 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35984 Bug ID: 35984 Summary: automated static code analysis should include security tests Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: evelyn(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org A few libraries have asked recently if, prior to production/during the development lifecycle, automated source code analysis tools are used to test for security flaws specifically. Typically these questions are in relation to processes like renewing cybersecurity insurance or initial discovery by a potential partner library's security/IT department. Perlcritic seems to be currently used, but as far as I can tell it appears the tests are for enforcing the coding standard. Using an automated tool to look for security flaws will be a beneficial addition to the project, so I'd like to at least start the discussion here. OWASP has an informational page for further reading: https://owasp.org/www-community/controls/Static_Code_Analysis -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 4

[Bug 30594] New: Package Crypt::CBC 2.35 or higher to increase security
by bugzilla-daemon＠bugs.koha-community.org 04 Aug '25

04 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30594 Bug ID: 30594 Summary: Package Crypt::CBC 2.35 or higher to increase security Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Packaging Assignee: koha-bugs(a)lists.koha-community.org Reporter: martin.renvoize(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org CC: mtj(a)kohaaloha.com Currently, Debian mostly comes with Crypt::CBC 2.33 pre-packaged. If we package 2.35 or above we can benefit from a performance boost as well as having the ability to update our derivation function to using the recommended pbkdf2 algorithm instead of the backwards compatible default of opensslv1. If we choose to package this, we should also update Koha::Encryption to reflect the change and use pbkdf2. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 5

[Bug 35519] New: apt install koha-common has error with koha-l10n
by bugzilla-daemon＠bugs.koha-community.org 02 Aug '25

02 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35519 Bug ID: 35519 Summary: apt install koha-common has error with koha-l10n Change sponsored?: --- Product: Koha Version: 23.05 Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Packaging Assignee: koha-bugs(a)lists.koha-community.org Reporter: wizzyrea(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: mtj(a)kohaaloha.com Tomas said he saw this too, so it's not my (really Kyle's) custom package. :) Installing koha-common with apt install koha-common=<the package version string> with 23.05.06 over the top of an older version errors out as follows: dpkg: error processing archive /tmp/apt-dpkg-install-tZKDjI/062-koha-l10n_23.05.06-1_all.deb (--unpack): trying to overwrite '/usr/share/koha/misc/translator/po/am-Ethi-installer-MARC21.po', which is also in package koha-common 23.05.05 This can be fixed by running apt install -f and subsequent installs are ok. Cheers, Liz -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 4

[Bug 37413] New: Updating an item level hold to a next available hold also modifies the other holds on the bib record when that item level hold is on an item with no barcode
by bugzilla-daemon＠bugs.koha-community.org 01 Aug '25

01 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37413 Bug ID: 37413 Summary: Updating an item level hold to a next available hold also modifies the other holds on the bib record when that item level hold is on an item with no barcode Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: Laura.escamilla(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com To recreate: * Place an item level hold on the item with no barcode * Place an item level hold on any other item * From the Holds tab, change the dropdown of the first one from "no barcode" to "next available" * Update holds * Both item level holds are now next available holds. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 29

[Bug 37014] New: "Item was not checked in" printed on next POST because of missing supplementary form
by bugzilla-daemon＠bugs.koha-community.org 01 Aug '25

01 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37014 Bug ID: 37014 Summary: "Item was not checked in" printed on next POST because of missing supplementary form Change sponsored?: --- Product: Koha Version: 23.11 Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: Circulation Assignee: nugged(a)gmail.com Reporter: nugged(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com Depends on: 8461 Created attachment 167332 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=167332&action=e… (screenshot and diagram of a potential bug) This "not_returned" feature computation logic and: [% IF ( riloo.not_returned ) %] <span class="problem">Item was not checked in</span> [% END %] Our production servers started to show "Item was not checked in" for items that had just been checked in (also for manual check-in). I noticed that this happens on the second load. I.e., when there was a modal, grayed-out content under modal is shown correctly: there is no "not checked in" message, but then circ/returns.pl page reloaded, form POST'ed again, and on next screen, it shows this "not checked in" additional message, on the next after modal, page. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8461 [Bug 8461] Block returns of withdrawn items show as 'not checked out' -- You are receiving this mail because: You are watching all bug changes.

1 27

[Bug 13823] Item search should include note fields
by bugzilla-daemon＠bugs.koha-community.org 01 Aug '25

01 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13823 David Nind <david(a)davidnind.com> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=38331 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 32287] New: Capitalization: Printing and/or Publishing Information Transcribed as Found in the Colophon:␠
by bugzilla-daemon＠bugs.koha-community.org 01 Aug '25

01 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32287 Bug ID: 32287 Summary: Capitalization: Printing and/or Publishing Information Transcribed as Found in the Colophon:␠ Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Keywords: Academy Severity: trivial Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org Found while translating: Printing and/or Publishing Information Transcribed as Found in the Colophon:␠ koha-tmpl/intranet-tmpl/prog/en/xslt/UNIMARCslimUtils.xsl:161 koha-tmpl/opac-tmpl/bootstrap/en/xslt/UNIMARCslimUtils.xsl:322 and Printing and/or Publishing Information Transcribed as Found in the Main Source of Information:␠ koha-tmpl/intranet-tmpl/prog/en/xslt/UNIMARCslimUtils.xsl:180 koha-tmpl/opac-tmpl/bootstrap/en/xslt/UNIMARCslimUtils.xsl:341 -- You are receiving this mail because: You are watching all bug changes.

1 14

[Bug 32284] New: Capitalization: Audio Carriers
by bugzilla-daemon＠bugs.koha-community.org 01 Aug '25

01 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32284 Bug ID: 32284 Summary: Capitalization: Audio Carriers Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Keywords: Academy Severity: trivial Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/unimarc_field_183a.tt:15 Audio Carriers should be Audio carriers -- You are receiving this mail because: You are watching all bug changes.

1 18

[Bug 35945] New: Expand OverduesBlockCirc to guarantees and guarantors
by bugzilla-daemon＠bugs.koha-community.org 01 Aug '25

01 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35945 Bug ID: 35945 Summary: Expand OverduesBlockCirc to guarantees and guarantors Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: caroline.cyr-la-rose(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com We have NoIssuesChargeGuarantees and NoIssuesChargeGuarantorsWithGuarantees to expand noissuescharge to block checkouts for the patron's guarantor(s) and sibling(s). A lot of libraries are abolishing fines, and still need some way to block family accounts of overdue patrons. We could add - OverduesBlockCircGuarantor -> Block guarantor's account when guarantees have overdues - OverduesBlockCircGuarantorsWithGuarantees -> Block sibling accounts when a guarantee has overdues And maybe - OverduesBlockCircGuarantorDays -> Only block guarantor's account when guarantees have overdues of X days or more - OverduesBlockCircGuarantorsWithGuaranteesDays -> Only block sibling accounts when guarantees have overdues of X days or more Or combine the days with the main prefs, like noissuescharge. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 4