- Koha-bugs - lists.koha-community.org

[Bug 36818] Remote-Code-Execution (RCE) in upload-cover-image.pl (CVE-2024-36057)
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '24

20 Jun '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36818 --- Comment #32 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Missed the wrong commit message... Bug: ... Pushed for 24.11! Well done everyone, thank you! -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 36520] SQL Injection in opac-sendbasket.pl (CVE-2024-36058)
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '24

20 Jun '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36520 --- Comment #65 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Pushed for 24.11! Well done everyone, thank you! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36575] Wrong patron can be returned for API validation route
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '24

20 Jun '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36575 --- Comment #51 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Pushed for 24.11! Well done everyone, thank you! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 15495] Change Browse Shelf Display
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '24

20 Jun '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15495 Koha collecto <koha(a)collecto.ca> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |koha(a)collecto.ca --- Comment #1 from Koha collecto <koha(a)collecto.ca> --- +1 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36520] SQL Injection in opac-sendbasket.pl (CVE-2024-36058)
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '24

20 Jun '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36520 --- Comment #64 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- (In reply to Karolis Narvilas from comment #63) > Thanks - is there an approximate timeline for when these fixes will be > published ? The security releases have gone out now with these fixes. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 9596] Allow longoverdue.pl to be configured per library on the command line
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '24

20 Jun '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9596 holly(a)bywatersolutions.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |holly(a)bywatersolutions.com -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 8137] Checkout limit for all libraries
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '24

20 Jun '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8137 Thibaud Guillot <thibaud.guillot(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #167208|0 |1 is obsolete| | --- Comment #111 from Thibaud Guillot <thibaud.guillot(a)biblibre.com> --- Created attachment 167923 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=167923&action=e… Bug 8137: Add 'global' has_priority rules for checkouts I tried to review the desired behavior through this bug. The goal would be to be able to have a general 'override' rule. Currently, if you set a max_checkouts_allowed of 5 (regardless of itemtype) in one library, for example, and do the same in another, it adds up to 10. By giving checkout rules priority, you "overwrite" other local rules per branchcode. Test plan: 1) Set for library "A" a max_checkouts_allowed to 3 for any type of user and item type. 2) On main rules set the same rule to 2 3) Do a few checkouts with a user belonging to library A, normally you'll be able to do 3. 4) Apply this patch and run updatedatabase.pl and also rebuild your schema by updating dbix class files 5) See now the Has priority checkboxes on "Default checkout, hold and return policy" and "Default checkout, hold policy by patron category" 6) You can set here you new rule for "Total current checkouts allowed" to 2 7) Repeat step 3 and normally you won't be able to make the third Sponsored-by: BibLibre -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 8137] Checkout limit for all libraries
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '24

20 Jun '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8137 Thibaud Guillot <thibaud.guillot(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Failed QA |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37130] New: Add 335 to MARC21 default authority frameworks
by bugzilla-daemon＠bugs.koha-community.org 19 Jun '24

19 Jun '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37130 Bug ID: 37130 Summary: Add 335 to MARC21 default authority frameworks Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: MARC Authority data support Assignee: koha-bugs(a)lists.koha-community.org Reporter: caroline.cyr-la-rose(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org While working on bug 37128, I notices field 335 is not in the default authority frameworks https://www.loc.gov/marc/authority/ad335.html I think if a field is not in the framework, and you import a record that has values in that field, the values will be deleted? -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 1

[Bug 37011] New: Data provider is not a mandatory field when creating an eUsage report
by bugzilla-daemon＠bugs.koha-community.org 19 Jun '24

19 Jun '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37011 Bug ID: 37011 Summary: Data provider is not a mandatory field when creating an eUsage report Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: ERM Assignee: jonathan.druart(a)gmail.com Reporter: katrin.fischer(a)bsz-bw.de CC: jonathan.druart(a)gmail.com, jonathan.field(a)ptfs-europe.com, martin.renvoize(a)ptfs-europe.com, matt.blenkinsop(a)ptfs-europe.com, pedro.amorim(a)ptfs-europe.com ... but when you store a report without provider, it will break display. -- You are receiving this mail because: You are watching all bug changes.

1 1