- Koha-bugs - lists.koha-community.org

[Bug 27441] New: Create a notice that can be sent when the Long Overdue Cron runs
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27441 Bug ID: 27441 Summary: Create a notice that can be sent when the Long Overdue Cron runs Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Notices Assignee: koha-bugs(a)lists.koha-community.org Reporter: kelly(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Libraries that use the Long Overdue Cron would like to coordinate the Overdue Notices to this cron- which is not as easy as that since the Long Overdue cron doesn't look at the calendar but the Notices can and they are losing out on an actual overdue notice because they are using one for the 'bill'. Instead, can we have Koha send another Notice when the Long Overdue Cron runs and that can alert Patrons that they have been charged for their Long Overdue material. This would also allow for libraries to use the 3 current overdue notices - as Overdue Notices and this new notice to be used for the actual Charge to the patron's account. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 9

[Bug 38890] New: Prevent item price being copied to replacementprice
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38890 Bug ID: 38890 Summary: Prevent item price being copied to replacementprice Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: r.delahunty(a)arts.ac.uk QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com We now have the useDefaultReplacementCost parameter set to YES, rather than keying a current price determined by an internet search into the items.replacementprice field when billing for a lost item. We have deleted the replacementprice from our items so the default price is now used. But as new records are created the items.price data is being copied to the items.replacementprice field. An option to prevent the items.replacementprice field being populated for items added to MARC records created via the EDI process or by other ordering/loading methods may not suit everyone, but a copyPriceToReplacementPrice (yes/no) feature would remove the need for our weekly batch item modifications. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 38865] New: API functionality needed in lists to allow future connectivity with discovery systems
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38865 Bug ID: 38865 Summary: API functionality needed in lists to allow future connectivity with discovery systems Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: cbrannon(a)cdalibrary.org QA Contact: testopia(a)bugs.koha-community.org Lists can currently be read by outside discovery systems (I am assuming this is how Aspen can import current lists from Koha), but there is no current API path to allow lists to be managed centrally through Koha. Once Aspen imports the lists, they are two separate lists. I would like to see API enhanced to allow discovery systems to work in tandem with discovery systems, so those systems can work together and the lists can be maintained in one place. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3

[Bug 27603] New: Add API for lists management
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27603 Bug ID: 27603 Summary: Add API for lists management Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: oleonard(a)myacpl.org Created attachment 116256 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=116256&action=e… Screenshot of the list modal idea I was playing around with making the list add form a modal instead of a popup, and while it can be hacked together as things are now it really would be better to have an API to work with. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 3

[Bug 38470] Subscription detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38470 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)|25.05.00 |25.05.00,24.11.01,24.05.06, released in| |23.11.11,22.11.23 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38468] Staff interface detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38468 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)|25.05.00 |25.05.00,24.11.01,24.05.06, released in| |23.11.11,22.11.23 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37727] CVE-2024-24337 - Fix CSV formula injection - client side (DataTables)
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37727 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)|25.05.00 |25.05.00,24.11.01,24.05.06, released in| |23.11.11,22.11.23 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38470] Subscription detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38470 --- Comment #11 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Pushed for 25.05! Well done everyone, thank you! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38470] Subscription detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38470 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to main Version(s)| |25.05.00 released in| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38468] Staff interface detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38468 --- Comment #12 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Pushed for 25.05! Well done everyone, thank you! -- You are receiving this mail because: You are watching all bug changes.

1 0