July 2026 - Koha-bugs - lists.koha-community.org

[Bug 42735] SQL Injection in reports/issues_stats.pl via PeriodTypeSel / PeriodDaySel / PeriodMonthSel / Filter parameters (unvalidated string context, no placeholders)
by bugzilla-daemon＠bugs.koha-community.org 13 Jul '26

13 Jul '26

1 0

[Bug 42369] SQL Injection in reports/bor_issues_top.pl via the Filter request parameter (unvalidated string context, no placeholders)
by bugzilla-daemon＠bugs.koha-community.org 13 Jul '26

13 Jul '26

1 0

[Bug 42368] SQL Injection in reports/issues_avg_stats.pl via the Filter request parameter (unvalidated string context, no placeholders)
by bugzilla-daemon＠bugs.koha-community.org 13 Jul '26

13 Jul '26

1 0

[Bug 42363] SQL Injection in reports/catalogue_stats.pl via the Line request parameter
by bugzilla-daemon＠bugs.koha-community.org 13 Jul '26

13 Jul '26

1 0

[Bug 42360] SQL Injection in reports/acquisitions_stats.pl via Filter parameter
by bugzilla-daemon＠bugs.koha-community.org 13 Jul '26

13 Jul '26

1 0

[Bug 39215] New: EDIFACT quote files should skip orders that cannot be processed rather than failing to complete
by bugzilla-daemon＠bugs.koha-community.org 13 Jul '26

13 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39215 Bug ID: 39215 Summary: EDIFACT quote files should skip orders that cannot be processed rather than failing to complete Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: martin.renvoize(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org When loading an EDIFACT quote file, if the process finds problematic data (usually a mismatched LLO - Branchcode or other enumerated coded field) the load process gets stuck and displays as 'Processing' in the EDFACT messages page. This usually means that the remainder of the quotes in the file have to be manually corrected and is it's currently difficult to debug by library staff. It would be preferable if the process could skip, and report any problem data but complete all other quotes. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 23

[Bug 43033] New: Holds queue allocate with transport cost matrix can choose impossible holds
by bugzilla-daemon＠bugs.koha-community.org 13 Jul '26

13 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43033 Bug ID: 43033 Summary: Holds queue allocate with transport cost matrix can choose impossible holds Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Hold requests Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, lisette(a)bywatersolutions.com, tomascohen(a)gmail.com Target Milestone: --- Something about the retries and the way we build the matrices can fail when there are more holds than items. We have seen instances in libraries where items are being selected for the queue that are not allowed to transfer via the branch limits or the cost matrix -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 14

[Bug 42995] New: Error in table of pending orders prevents receiving orders
by bugzilla-daemon＠bugs.koha-community.org 13 Jul '26

13 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42995 Bug ID: 42995 Summary: Error in table of pending orders prevents receiving orders Initiative type: --- Sponsorship --- status: Product: Koha Version: 24.11 Hardware: All OS: All Status: NEW Severity: blocker Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org Target Milestone: --- Found while testing bug 40575 and confirmed by David on main: [ERROR] GET /api/v1/acquisitions/orders: unhandled exception (DBIx::Class::Exception)<<DBIx::Class::Storage::DBI::_dbh_execute(): DBI Exception: DBD::mysql::st execute failed: Unknown column 'biblio.biblionumber' in 'WHERE' at /kohadevbox/koha/Koha/Objects.pm line 401>> 1. Add an order to the bask for My Vendor. 2. Close the basket 3. Go the vendor page 4. Click 'Receive shipments' 5. Enter an invoice number 6. Click 'Next' 7. You get a "Something went wrong when loading the table. 500: Internal Server Error." Click OK 8. The 'Receive orders from My Vendor" page sits on "Processing ....". 9. There is the error above in the plack-api-error.log -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 17

[Bug 42339] New: Canceling a Record display customization directs to the HTML customizations
by bugzilla-daemon＠bugs.koha-community.org 13 Jul '26

13 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42339 Bug ID: 42339 Summary: Canceling a Record display customization directs to the HTML customizations Initiative type: --- Sponsorship --- status: Product: Koha Version: 25.11 Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: Staff interface Assignee: koha-bugs(a)lists.koha-community.org Reporter: dmeininger591(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Bug 39860 introduced Record Display Customizations to the Tools module > Additional Content. When editing an entry and then selecting cancel you are returned to the HTML customizations section instead of back to the Record Display Customization. This is not how the other Additional Content tools work. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 12

[Bug 41796] New: "Forgot your password" link is not visible if OpacResetPassword is enabled but OpacPasswordChange is disabled
by bugzilla-daemon＠bugs.koha-community.org 13 Jul '26

13 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41796 Bug ID: 41796 Summary: "Forgot your password" link is not visible if OpacResetPassword is enabled but OpacPasswordChange is disabled Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: lari.taskula(a)hypernova.fi QA Contact: testopia(a)bugs.koha-community.org "Forgot your password" is not visible if OpacResetPassword is enabled but OpacPasswordChange is disabled "OpacResetPassword" / "Forgot your password" is the functionality that patrons can use to reset a forgotten password using a recovery link that is sent to their email. This is a feature controlled by system preference "OpacResetPassword". "OpacPasswordChange" is the functionality that logged in patrons can use to change their password, provided that they remember their current password. OpacPasswordChange should not be linked to OpacResetPassword. -- You are receiving this mail because: You are watching all bug changes.

1 14