- Koha-bugs - lists.koha-community.org

[Bug 38969] Reflected XSS vulnerability in tags
by bugzilla-daemon＠bugs.koha-community.org 26 May '25

26 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38969 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to oldstable |Pushed to oldoldstable -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38969] Reflected XSS vulnerability in tags
by bugzilla-daemon＠bugs.koha-community.org 26 May '25

26 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38969 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to stable |Pushed to oldstable -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38969] Reflected XSS vulnerability in tags
by bugzilla-daemon＠bugs.koha-community.org 26 May '25

26 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38969 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |Pushed to stable -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 28478] New: MARC detail and ISBD pages still show suppressed records
by bugzilla-daemon＠bugs.koha-community.org 26 May '25

26 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28478 Bug ID: 28478 Summary: MARC detail and ISBD pages still show suppressed records Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org I couldn't verify on master yet, but tested on 20.11.05: When a record is suppressed in the catalog using 942$n=1 and OpacSuppression a direct link to the MARCdetail page will still work: /cgi-bin/koha/opac-MARCdetail.pl?biblionumber=x This is problematic as some search bots could still index the records and someone clever would also be able to guess it. I think we need to add checks for suppression on these pages and redirect according to OpacSuppressionRedirect. -- You are receiving this mail because: You are watching all bug changes.

1 18

[Bug 37247] On subscriptions operation allowed without authentication
by bugzilla-daemon＠bugs.koha-community.org 26 May '25

26 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37247 Baptiste Wojtkowski (bwoj) <baptiste.wojtkowski(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |39996 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39996 [Bug 39996] Subscription cannot be reopened -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 39989] New: Expand LocalHoldsPriority groups to allow different settings by group
by bugzilla-daemon＠bugs.koha-community.org 26 May '25

26 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39989 Bug ID: 39989 Summary: Expand LocalHoldsPriority groups to allow different settings by group Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Hold requests Assignee: koha-bugs(a)lists.koha-community.org Reporter: lisette(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Some libraries would like to be able to set LocalHoldsPriority to be able to have each group set to Group vs Library and Group instead of the same for all groups. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3

[Bug 39953] New: Inventory exports should have a way to export the whole result
by bugzilla-daemon＠bugs.koha-community.org 26 May '25

26 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39953 Bug ID: 39953 Summary: Inventory exports should have a way to export the whole result Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: koha-bugs(a)lists.koha-community.org Reporter: baptiste.wojtkowski(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org Bug 36496 added a way to export results. However export only exports the displayed results. Hence it is limited to the number of displayed results. There should be an option to display all results or to export the whole results regardless of the display. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 4

[Bug 36867] ILS-DI AuthorizedIPs should deny explicitly except those listed
by bugzilla-daemon＠bugs.koha-community.org 26 May '25

26 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36867 Paul Derscheid <paul.derscheid(a)lmscloud.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)|25.05.00,24.11.05,24.11.04, |25.05.00,24.11.04,24.05.09, released in|24.05.09,23.11.14,22.11.26 |23.11.14,22.11.26 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36867] ILS-DI AuthorizedIPs should deny explicitly except those listed
by bugzilla-daemon＠bugs.koha-community.org 26 May '25

26 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36867 --- Comment #35 from Paul Derscheid <paul.derscheid(a)lmscloud.de> --- Nice work everyone! Pushed to 24.11.x for 24.11.05 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36867] ILS-DI AuthorizedIPs should deny explicitly except those listed
by bugzilla-daemon＠bugs.koha-community.org 26 May '25

26 May '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36867 Paul Derscheid <paul.derscheid(a)lmscloud.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |Pushed to stable Version(s)|25.05.00,24.11.04,24.05.09, |25.05.00,24.11.05,24.11.04, released in|23.11.14,22.11.26 |24.05.09,23.11.14,22.11.26 -- You are receiving this mail because: You are watching all bug changes.

1 0