February 2026 - Koha-bugs - lists.koha-community.org

[Bug 15522] New interface for revamped circulation rules
by bugzilla-daemon＠bugs.koha-community.org 03 Feb '26

03 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15522 Michaela Sieber <michaela.sieber(a)kit.edu> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |michaela.sieber(a)kit.edu --- Comment #170 from Michaela Sieber <michaela.sieber(a)kit.edu> --- Please see also Bug 41439 -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 8179] Receiving multiple order lines at once
by bugzilla-daemon＠bugs.koha-community.org 03 Feb '26

03 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8179 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |34879 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34879 [Bug 34879] ./catalogue/getitem-ajax.pl appears to be unused -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 31612] New: koha-z3950-responder breaks if it's run in a Koha that was created before bug 28364 was applied
by bugzilla-daemon＠bugs.koha-community.org 03 Feb '26

03 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31612 Bug ID: 31612 Summary: koha-z3950-responder breaks if it's run in a Koha that was created before bug 28364 was applied Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Z39.50 / SRU / OpenSearch Servers Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl The problem is the same as Bug 28364 but that it affects upgraded Koha instances rather than new Koha instances. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 11

[Bug 41662] CSRF-vulnerability in opac-patron-consent.pl.
by bugzilla-daemon＠bugs.koha-community.org 03 Feb '26

03 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41662 --- Comment #17 from David Cook <dcook(a)prosentient.com.au> --- (In reply to Andreas Jonsson from comment #15) > # FIXME This is only needed for scripts not using plack > my $op = $query->param('op'); > if ( defined $op && $op =~ m{^cud-} ) { > die "Cannot use GET for this request" > if $request_method eq 'GET'; > } There's only a couple of scripts that aren't handled by Plack at this point. And if anyone is running Koha without Plack in general, they should stop, because I'm pretty sure we only recommend and support Plack-enabled Koha in the community. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 41662] CSRF-vulnerability in opac-patron-consent.pl.
by bugzilla-daemon＠bugs.koha-community.org 03 Feb '26

03 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41662 --- Comment #16 from David Cook <dcook(a)prosentient.com.au> --- (In reply to Andreas Jonsson from comment #15) > Sorry for not paying attention to this issue, but only look att the op > parameter as this requires that this validation is made in checkauth: > > # FIXME This is only needed for scripts not using plack > my $op = $query->param('op'); > if ( defined $op && $op =~ m{^cud-} ) { > die "Cannot use GET for this request" > if $request_method eq 'GET'; > } Since this script would be served by Plack, the Plack middleware would've already caught it. This is irrelevant. > The comment suggest that this check may be removed at some point. Wouldn't > it be safer to validate the method directly? > > - if ( $op && $op eq 'cud-save' ) { > > + if ( uc $query->request_method eq 'POST' ) { Yes, but that's not the pattern that the rest of Koha uses. It's better to be consistent than "correct". Koha::Middleware::Plack catches the GET op=cud-save issue. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 41754] New: Barcode generator should be in tools
by bugzilla-daemon＠bugs.koha-community.org 03 Feb '26

03 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41754 Bug ID: 41754 Summary: Barcode generator should be in tools Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: koha-bugs(a)lists.koha-community.org Reporter: cbrannon(a)cdalibrary.org QA Contact: testopia(a)bugs.koha-community.org Wondering if the Barcode generator should be also available in tools, and not just cataloging. I imagine many people could use the barcode generator (especially for QR codes) and not be a cataloger. Wondering if there could be a second access point via tools that doesn't require a cataloger permission? -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 2

[Bug 11825] Hide shelving locations from advanced search
by bugzilla-daemon＠bugs.koha-community.org 03 Feb '26

03 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11825 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |In Discussion -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 11825] Hide shelving locations from advanced search
by bugzilla-daemon＠bugs.koha-community.org 03 Feb '26

03 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11825 --- Comment #4 from David Cook <dcook(a)prosentient.com.au> --- (In reply to David Cook from comment #3) > Isn't this just controlled by the syspref AdvancedSearchTypes? Ah wait that might just be for the staff interface... I guess it's actually OpacAdvancedSearchTypes -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 11825] Hide shelving locations from advanced search
by bugzilla-daemon＠bugs.koha-community.org 03 Feb '26

03 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11825 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook(a)prosentient.com.au --- Comment #3 from David Cook <dcook(a)prosentient.com.au> --- Isn't this just controlled by the syspref AdvancedSearchTypes? -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 15516] Allow to place a hold on first available item from a group of titles
by bugzilla-daemon＠bugs.koha-community.org 03 Feb '26

03 Feb '26

1 0