August 2026 - Koha-bugs - lists.koha-community.org

[Bug 43245] New: When sending a reset email, there should be a message if no email was provided
by bugzilla-daemon＠bugs.koha-community.org 17 Aug '26

17 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43245 Bug ID: 43245 Summary: When sending a reset email, there should be a message if no email was provided Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: baptiste.wojtkowski(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle(a)bywatersolutions.com Target Milestone: --- -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 12

[Bug 42471] /cgi-bin/koha/suggestion/suggestion.pl Multiple Parameters Stored Cross-Site Scripting
by bugzilla-daemon＠bugs.koha-community.org 17 Aug '26

17 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42471 --- Comment #30 from David Cook <dcook(a)prosentient.com.au> --- (In reply to wsparks from comment #29) > Thanks for handling this vuln report so smoothly. Do you all have a > estimated timeframe for the 26.11 release? Thanks for your patience! The 26.11 release isn't until November, but it's irrelevant for your case. The important thing is that the fix has been released for the currently supported versions: 26.05.02, 25.11.07, and 25.05.13. (It wasn't needed for 24.11.) So feel free to request a CVE and share it with us so we can update the report title with the ID. Thanks! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 31180] New: Provide a koha-conf.xml (etc.) checker.
by bugzilla-daemon＠bugs.koha-community.org 17 Aug '26

17 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31180 Bug ID: 31180 Summary: Provide a koha-conf.xml (etc.) checker. Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: egpetridis(a)yahoo.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com I feel that a checker should be provided that checks the various configuration files -koha-conf.xml is a prime suspect- and notify the library admin of missing stanzas or invalid values. For example, missing information on fonts to be used, or reference to non-existent (or non-accessible) files and/or folders. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 14

[Bug 43308] New: Migrate circ/article-requests.tt and request-article.tt to use api-client.js
by bugzilla-daemon＠bugs.koha-community.org 15 Aug '26

15 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43308 Bug ID: 43308 Summary: Migrate circ/article-requests.tt and request-article.tt to use api-client.js Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle(a)bywatersolutions.com Depends on: 34451 Target Milestone: --- circ/article-requests.tt and circ/request-article.tt use raw jQuery.ajax() for DELETE calls to /api/v1/article_requests/.... These need to be migrated to api-client.js for proper CSRF token handling (bug 34451). -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3

[Bug 43314] New: Add cron reminder to AnonymizeLastBorrower/AnonymizeLastBorrowerDays description
by bugzilla-daemon＠bugs.koha-community.org 14 Aug '26

14 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43314 Bug ID: 43314 Summary: Add cron reminder to AnonymizeLastBorrower/AnonymizeLastBorrowerDays description Initiative type: --- Sponsorship --- status: Product: Koha Version: 26.05 Hardware: All OS: All Status: NEW Severity: trivial Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: sbrown(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Depends on: 23260 Target Milestone: --- The new AnonymizeLastBorrower/AnonymizeLastBorrowerDays system preference set should have a note that the anonymize_last_borrowers.pl and batch_anonymize.pl crons are required for them to function properly, similar to the notes for MembershipExpiryDaysNotice ("NOTE: This system preference requires the misc/cronjobs/membership_expiry.pl cronjob. Ask your system administrator to schedule it.") and the multiple DefaultLongOverdue preferences ("NOTE: This system preference requires the misc/cronjobs/longoverdue.pl cronjob. Ask your system administrator to schedule it."). Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23260 [Bug 23260] Anonymize (remove) patron data from items_last_borrower -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 23260] New: Anonymize (remove) patron data from items_last_borrower
by bugzilla-daemon＠bugs.koha-community.org 14 Aug '26

14 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23260 Bug ID: 23260 Summary: Anonymize (remove) patron data from items_last_borrower Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Command-line Utilities Assignee: koha-bugs(a)lists.koha-community.org Reporter: joy(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: robin(a)catalyst.net.nz Increase level of patron privacy by removing patron information from the items_last_borrower table after a set period of time. Adjust the batch_anonymize cronjob to also remove data from the items_last_borrower table when the data is more than x days old (runtime option) but not if the item is lost, damaged, or withdrawn. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 336

[Bug 43260] New: Debug options in navigation bar untranslatable
by bugzilla-daemon＠bugs.koha-community.org 14 Aug '26

14 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43260 Bug ID: 43260 Summary: Debug options in navigation bar untranslatable Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: I18N/L10N Assignee: koha-bugs(a)lists.koha-community.org Reporter: caroline.cyr-la-rose(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org CC: caroline.cyr-la-rose(a)inlibro.com, f.demians(a)tamil.fr, jonathan.druart(a)gmail.com, julian.maurice(a)biblibre.com Target Milestone: --- The options added by bug 39142 in the navigation bar are not translatable. I could only find "Toggle User CSS", "Toggle User JS", and "Toggle Custom Stylesheets" in the po files. But in the navbar, the options are "Disable User CSS", "Enable User CSS", "Disable User JS", "Enable User JS", "Disable Custom Stylesheets" and "Enable Custom Stylesheets". To test : cd misc/translator/po git grep "Disable User CSS" fr-CA* --> returns nothing Sorry for the weird test plan. I don't know how else to find strings. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 23

[Bug 42909] New: Suspend class missing from suspended holds on request.pl
by bugzilla-daemon＠bugs.koha-community.org 14 Aug '26

14 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42909 Bug ID: 42909 Summary: Suspend class missing from suspended holds on request.pl Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Hold requests Assignee: koha-bugs(a)lists.koha-community.org Reporter: emily.lamancusa(a)montgomerycountymd.gov QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, lisette(a)bywatersolutions.com, tomascohen(a)gmail.com Depends on: 23269 Target Milestone: --- When viewing the holds list for a particular biblio record, the tr (table row) elements previously had a "suspend" class, allowing CSS styling of suspended holds. As of 25.11.05, that class is missing. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23269 [Bug 23269] Long hold queues are slowing the service -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 19

[Bug 42471] /cgi-bin/koha/suggestion/suggestion.pl Multiple Parameters Stored Cross-Site Scripting
by bugzilla-daemon＠bugs.koha-community.org 14 Aug '26

14 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42471 --- Comment #29 from wsparks(a)vulncheck.com --- Thanks for handling this vuln report so smoothly. Do you all have a estimated timeframe for the 26.11 release? -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 43306] New: Migrate catalogue/detail.tt to use api-client.js for bundled items
by bugzilla-daemon＠bugs.koha-community.org 14 Aug '26

14 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43306 Bug ID: 43306 Summary: Migrate catalogue/detail.tt to use api-client.js for bundled items Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Depends on: 34451 Target Milestone: --- catalogue/detail.tt uses raw jQuery.ajax() for DELETE calls to /api/v1/items/.../bundled_items/.... These need to be migrated to api-client.js for proper CSRF token handling (bug 34451). -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 3