January 2026 - Koha-bugs - lists.koha-community.org

[Bug 39602] New: Installer doesn't work with TLS MySQL connection without mutual authentication
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39602 Bug ID: 39602 Summary: Installer doesn't work with TLS MySQL connection without mutual authentication Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Installation and upgrade (web-based installer) Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Bug 36026 implemented TLS connections without mutual authentication by patching Database.pm. While we assumed that Koha always that to create a connection, it's not quite true. Installer.pm also needs to be patched: https://git.koha-community.org/Koha-community/Koha/src/branch/main/C4/Insta… I wonder if it could also be an option to always use Database.pm to centralize this code? -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 1

[Bug 18623] New: Send notification on creation of manual invoice
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18623 Bug ID: 18623 Summary: Send notification on creation of manual invoice Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Notices Assignee: koha-bugs(a)lists.koha-community.org Reporter: lisetteslatah(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org It would be nice if when adding a manual invoice (say for a damaged item) an e-mail notification could be sent. Currently to tell the patron without them logging into the OPAC or coming into the library we have to send the e-mail manually. This is time consuming if we have a lot of damaged items being processed at once. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 8

[Bug 35445] New: OPAC registration verification triggered by email URL scanners
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35445 Bug ID: 35445 Summary: OPAC registration verification triggered by email URL scanners Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com I've noticed that Microsoft Safe Links is triggering /cgi-bin/koha/opac-registration-verify.pl?token=X links. This means that the end user ends up seeing "Registration invalid" because the Microsoft link scanner has already verified the registration by hitting the page with a GET. We should update opac-registration-verify.pl so that it requires the user to click a button for a POST form confirming their registration. (NOTE: Since opac-registration-verify.pl performs a state change, it should be a POST anyway.) -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 26

[Bug 41612] New: Marking checkout notes as seen/unseen shows misleading error messages
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41612 Bug ID: 41612 Summary: Marking checkout notes as seen/unseen shows misleading error messages Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: tadeusz(a)sosnierz.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle(a)bywatersolutions.com "Mark seen"/"Mark not seen" buttons on "Checkout notes" page don't do their error reporting correctly. This manifests itself as an error message "Unable to change status of note." showing up on the page when no error happens (and a page refresh confirms that the operation worked). This is caused by incorrect handling of an asynchronous JS response object, for which a patch is coming right up. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 1

[Bug 36161] New: ISLDI AuthenticatePatron broken when LDAP enabled and auth falls back to internal connection
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36161 Bug ID: 36161 Summary: ISLDI AuthenticatePatron broken when LDAP enabled and auth falls back to internal connection Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: critical Priority: P5 - low Component: Authentication Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org bug 34893 passes a patron object back from authentication, however, when LDAP is enabled we define the patron from the return of checkpw_ldap When the ldap auth is a failure, we fallback to internal, however, we don't redefine the patron object In the code: 1965 if ( defined $userid ) { 1966 $patron = Koha::Patrons->find( { userid => $userid } ); 1967 $patron = Koha::Patrons->find( { cardnumber => $userid } ) unless $patron; 1968 } . . . 1980 } elsif ( $ldap && defined($password) ) { 1981 my ( $retval, $retcard, $retuserid ); 1982 ( $retval, $retcard, $retuserid, $patron ) = checkpw_ldap(@_); # EXTERNAL AUTH . . . 2026 # INTERNAL AUTH 2027 if ($check_internal_as_fallback) { 2028 @return = checkpw_internal( $userid, $password, $no_set_userenv ); 2029 push( @return, $patron ); 2030 $passwd_ok = 1 if $return[0] > 0; # 1 or 2 2031 } line 1982 undefs, line 2029 returns it In ilsdi: 397 my ($status, $cardnumber, $userid, $patron) = C4::Auth::checkpw( $username, $password ); 398 if ( $status == 1 ) { 399 # Track the login 400 $patron->update_lastseen('connection'); 401 return { id => $patron->borrowernumber }; 402 } We die on undefined patron -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 22

[Bug 39564] New: Enable runtime translations for plugins (Koha::I18N)
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39564 Bug ID: 39564 Summary: Enable runtime translations for plugins (Koha::I18N) Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: I18N/L10N Assignee: julian.maurice(a)biblibre.com Reporter: julian.maurice(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org CC: f.demians(a)tamil.fr, jonathan.druart(a)gmail.com This is an attempt to have translatable plugins (like bug 37472) but using Koha::I18N (runtime translations) See also bug 37472 comment 11 and bug 37472 comment 8 -- You are receiving this mail because: You are watching all bug changes.

1 14

[Bug 40569] New: Quotation marks in series fields (490/830) break search links in XSLT detail view
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40569 Bug ID: 40569 Summary: Quotation marks in series fields (490/830) break search links in XSLT detail view Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Staff interface Assignee: koha-bugs(a)lists.koha-community.org Reporter: slavashishkin(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Search links generated from series fields in the XSLT detail view (MARC 440a/490a/830a) fail when the series title contains quotation marks ("), due to the lack of escaping in the generated URL. Steps to reproduce: 1. Create or edit a bibliographic record (better more than one) 2. In field 490$a or 830$a, enter a series name with quotes, e.g., Test "Series" 3. Save the record 4. On the detail page, click the Series link (generated from the XSLT view) Series: Test "Series" 5. The search fails or returns an error due to a malformed query -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 9

[Bug 32488] New: add indexes for content, media and carrier type
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32488 Bug ID: 32488 Summary: add indexes for content, media and carrier type Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Searching Assignee: koha-bugs(a)lists.koha-community.org Reporter: mathsabypro(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org I don't think there are indexes for those MARC21 fields 336 - Content Type (R) 337 - Media Type (R) 338 - Carrier Type (R) nor for their UNIMARC equivalent 181 - Content form 182 - Media type 183 - type of carrier It could be nice to add those indexes and to add the ability to use them in advanced search -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 21

[Bug 41610] New: Add search engine indexes for content, media and carrier type (UNIMARC)
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41610 Bug ID: 41610 Summary: Add search engine indexes for content, media and carrier type (UNIMARC) Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Searching Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org Bug 32488 adds indexes for the RDA fields 336-338 MARC21. We should also add the equivalent indexes for UNIMARC: (In reply to Mathieu Saby from comment #0) > I don't think there are indexes for those MARC21 fields > 336 - Content Type (R) > 337 - Media Type (R) > 338 - Carrier Type (R) > > nor for their UNIMARC equivalent > 181 - Content form > 182 - Media type > 183 - type of carrier > > It could be nice to add those indexes and to add the ability to use them in > advanced search -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 25370] New: Create whitelist of plugins allowed to be installed
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '26

14 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25370 Bug ID: 25370 Summary: Create whitelist of plugins allowed to be installed Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Plugin architecture Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org This feature would provide a whitelist of plugins that are allowed to be installed in Koha. This whitelist would be managed by some kind of administrator*. This feature coupled with Bug 24632 would allow Koha users to only installed certain authentic plugins from trusted providers. (*I've been thinking that a superlibrarian really should be able to configure all aspects of Koha. However, from a vendor perspective, there are quality of service and security risks that comes with that. So perhaps the administrator level should be configurable. Defaulting to superlibrarian but optionally being switched to backend sysadmin for vendors, so that they can have ultimate say, when running on their own hardware.) -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 9