August 2026 - Koha-bugs - lists.koha-community.org

[Bug 42860] New: UNIVERSAL::require is deprecated and should be replaced
by bugzilla-daemon＠bugs.koha-community.org 12 Aug '26

12 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42860 Bug ID: 42860 Summary: UNIVERSAL::require is deprecated and should be replaced Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: SIP2 Assignee: koha-bugs(a)lists.koha-community.org Reporter: kyle(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Target Milestone: --- UNIVERSAL::require is used only for the SIP server and nowhere else. We should be able to replace it with Module::Load which is already used in Koha elsewhere. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 6

[Bug 42847] SIP authentication ignored after initial successful connection
by bugzilla-daemon＠bugs.koha-community.org 12 Aug '26

12 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42847 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|Pushed to main |RESOLVED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42749] SQL injection in acqui/parcels.pl via the orderby parameter (ORDER BY direction) reaching C4::Acquisition::GetInvoices
by bugzilla-daemon＠bugs.koha-community.org 12 Aug '26

12 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42749 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42747] Stored SQL injection via patroncard layout image_name (patroncards/edit-layout.pl -> create-pdf.pl)
by bugzilla-daemon＠bugs.koha-community.org 12 Aug '26

12 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42747 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42746] Stored SQL injection via unvalidated 'agefield' in automatic_item_modification_by_age (C4::Items::ToggleNewStatus)
by bugzilla-daemon＠bugs.koha-community.org 12 Aug '26

12 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42746 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|Pushed to main |RESOLVED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42471] /cgi-bin/koha/suggestion/suggestion.pl Multiple Parameters Stored Cross-Site Scripting
by bugzilla-daemon＠bugs.koha-community.org 12 Aug '26

12 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42471 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 30233] [ZDI-CAN-29165] Remote code execution in user-supplied regex
by bugzilla-daemon＠bugs.koha-community.org 12 Aug '26

12 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30233 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|Pushed to main |RESOLVED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42802] New: kohastructure.sql needs adjustments for mariadb 12.3
by bugzilla-daemon＠bugs.koha-community.org 12 Aug '26

12 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42802 Bug ID: 42802 Summary: kohastructure.sql needs adjustments for mariadb 12.3 Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: jonathan.druart(a)gmail.com Reporter: jonathan.druart(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Target Milestone: --- kohastructure.sql needs to be adjusted since the mariadb version bump 12.2=>12.3 -- You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 43275] New: Allow multiple external accounts from same provider for SMS::Send
by bugzilla-daemon＠bugs.koha-community.org 11 Aug '26

11 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43275 Bug ID: 43275 Summary: Allow multiple external accounts from same provider for SMS::Send Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: hdunne-howrie(a)westminster.gov.uk QA Contact: testopia(a)bugs.koha-community.org Target Milestone: --- We want to be able to hook us separate accounts for SMS::Send from the same external provider but we are unable to do so in Koha. We need this as we use a single instance of Koha for a small consortim. Currently we are having to use one account from our UK provider for SMS messages (Notify Gov). This is a problem for us as Notify Gov providers an amount of free messages per year per local government. As our consortim includes more than one council this means we quickly burn through our free credits and are paying a charge that we didn't used to have to pay in our previous library system which could support sending out SMS in the native library system (SirsiDynix Symphony). If there was a way to allow for setting up multiple SMS accounts for the integration based on mapping by Koha library to each account, this would save us money each year and would likely be of use to other Koha libraries that are in a consortim and use one instance of Koha. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 41620] New: Make itemsearch.pl use Koha::CSV for CSV generation
by bugzilla-daemon＠bugs.koha-community.org 11 Aug '26

11 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41620 Bug ID: 41620 Summary: Make itemsearch.pl use Koha::CSV for CSV generation Initiative type: --- Sponsorship --- status: Product: Koha Version: 24.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org This will save us a lot of headaches for sure. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 42