July 2026 - Koha-bugs - lists.koha-community.org

[Bug 42253] Stored XSS in advanced editor in Macro name
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '26

02 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42253 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |Needs documenting -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42253] Stored XSS in advanced editor in Macro name
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '26

02 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42253 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)|26.05.00,25.11.04,25.05.10, |26.05.00,25.11.04,25.05.10, released in|24.11.15 |24.11.15,22.11.37 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42253] Stored XSS in advanced editor in Macro name
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '26

02 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42253 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)|26.05.00,25.11.04,25.05.10, |26.05.00,25.11.04,25.05.10, released in|24.11.15,22.11.37 |24.11.15 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42253] Stored XSS in advanced editor in Macro name
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '26

02 Jul '26

1 0

[Bug 42978] New: Renewal window
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '26

02 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42978 Bug ID: 42978 Summary: Renewal window Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: cbrannon(a)cdalibrary.org QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle(a)bywatersolutions.com Target Milestone: --- Should renewals have a window of time (both manual and auto) for renewals, in order to prevent checkout abuse. Consider, you have ManualRenewalPeriodBase set to "the old duedate of the checkout". You check it out, and the patron or staff at some point before it is due hits renewal (either on accident or on purpose). For this scenario, lets say it is done right after checkout. This could effectively work around limits to not renew if the item goes on hold. If the library allows a couple of renewals, this prevents bringing the item back sooner if others are waiting for the item. I haven't seen such a window, but allowing a window of x number of days before and after the due date to renew would make sense, to limit people gaming the checkout period. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 1

[Bug 42917] New: Error when changing existing hold from item/record level with only place_holds permission
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '26

02 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42917 Bug ID: 42917 Summary: Error when changing existing hold from item/record level with only place_holds permission Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Hold requests Assignee: koha-bugs(a)lists.koha-community.org Reporter: lucas(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, lisette(a)bywatersolutions.com, tomascohen(a)gmail.com Target Milestone: --- To recreate: 1/ Create or find a user with place_hold permission but not the top level permission 2/ Place a hold 3/ From reserve/request.pl?biblionumber=X try to change the hold from record to item, or vice versa. 4/ See popup: There was an error:error Forbidden -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3

[Bug 42960] New: Database update 25.12.00.059 attempts Elasticsearch mapping update when SearchEngine is Zebra
by bugzilla-daemon＠bugs.koha-community.org 01 Jul '26

01 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42960 Bug ID: 42960 Summary: Database update 25.12.00.059 attempts Elasticsearch mapping update when SearchEngine is Zebra Initiative type: --- Sponsorship --- status: Product: Koha Version: 26.05 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Installation and upgrade (command-line installer) Assignee: koha-bugs(a)lists.koha-community.org Reporter: mark(a)hofstetter.at QA Contact: testopia(a)bugs.koha-community.org CC: tomascohen(a)gmail.com Target Milestone: --- When upgrading a Koha instance to 26.05, db revision 25.12.00.059 (Bug 40658 - Ensure local-number is sortable) unconditionally instantiates Koha::SearchEngine::Elasticsearch::Indexer and calls update_mappings(). This happens even when the instance has SearchEngine = Zebra. On a Zebra-only instance without Elasticsearch configured, koha-upgrade-schema fails and blocks the entire schema upgrade: Upgrade to 25.12.00.059: Bug 40658 - Ensure local-number is sortable ERROR: Exception 'Koha::Exception' thrown 'Unable to update mappings for index "koha_lise_biblios". Reason was: "". Index needs to be recreated and reindexed' Reproduced in koha-testing-docker with KOHA_IMAGE=26.05, SearchEngine=Zebra, by resetting Version to 25.1200058 and setting local-number sort=0. Expected behavior: - The DB revision should still set search_marc_to_field.sort = 1. - Elasticsearch mappings should only be updated if SearchEngine is Elasticsearch. - Zebra-only instances should not require Elasticsearch to complete koha-upgrade-schema. Proposed fix: Guard the Elasticsearch mapping update with: if ( C4::Context->preference('SearchEngine') eq 'Elasticsearch' ) { ... } and report that the ES mapping update was skipped otherwise. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 3

[Bug 9598] Ability to split up shipping cost between all items and funds on an invoice
by bugzilla-daemon＠bugs.koha-community.org 01 Jul '26

01 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9598 Bethany <badubois(a)huntington.edu> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |badubois(a)huntington.edu --- Comment #5 from Bethany <badubois(a)huntington.edu> --- This would be a very nice addition. It would also be nice to add the option to add processing fees per item and not as a total amount. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 37463] New: Include cover images on staff interface check out screen
by bugzilla-daemon＠bugs.koha-community.org 01 Jul '26

01 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37463 Bug ID: 37463 Summary: Include cover images on staff interface check out screen Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: danyonsewell(a)catalyst.net.nz QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com We would like to request an enhancement for cover images to be visible on the check out/issues screen a the time of issuing books. We would like this option to be enabled for specific borrower categories, eg we would enable for student and staff categories, but not for general borrower categories such as Library trollies. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 43

[Bug 40582] New: Serials subscription not linked to an acquisitions basket
by bugzilla-daemon＠bugs.koha-community.org 01 Jul '26

01 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40582 Bug ID: 40582 Summary: Serials subscription not linked to an acquisitions basket Change sponsored?: --- Product: Koha Version: 24.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: angela.berrett(a)familysearch.org QA Contact: testopia(a)bugs.koha-community.org We use a vendor to manage and maintain many of our serial subscriptions. We have this vendor in the Acquisitions module and create baskets for putting in invoices. However, there is no way to tie the individual serial issues to the monthly or quarterly baskets, so when we receive and issue it doesn't clear from the basket as received. We have to manually go into the basket and marked it as received as well as processing it in the Serials module. Can the serials subscription be linked to a basket? -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3