- Koha-bugs - lists.koha-community.org

[Bug 41591] XSS vulnerability via file upload function for invoices
by bugzilla-daemon＠bugs.koha-community.org 25 Feb '26

25 Feb '26

1 0

[Bug 35830] New: Add separate permission for Merging Patrons
by bugzilla-daemon＠bugs.koha-community.org 25 Feb '26

25 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35830 Bug ID: 35830 Summary: Add separate permission for Merging Patrons Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: rcoert(a)arlingtonva.us QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com Currently, the ability to Merge Patrons is lumped under the "Add, modify, and view patron information" (edit_borrowers). Merging patron records is more powerful than the ability to add/modify/view a patron record. My request is to have this as a separate permission, similar to that of delete_borrowers. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 30

[Bug 41874] New: Display the label and not the code of the value if a subfield is controlled by an authorized value
by bugzilla-daemon＠bugs.koha-community.org 25 Feb '26

25 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41874 Bug ID: 41874 Summary: Display the label and not the code of the value if a subfield is controlled by an authorized value Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: mathsabypro(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl If a MARC subfield is controlled by an authorized value in the cataloging framework, Koha displays the code of the authorized value and not its label, except for certain specific fields (libraries, locations, etc.). Koha should systematically display the label and not the code of the value. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 5

[Bug 31118] New: Allow to send the TOTP token when enabling 2FA
by bugzilla-daemon＠bugs.koha-community.org 25 Feb '26

25 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31118 Bug ID: 31118 Summary: Allow to send the TOTP token when enabling 2FA Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Authentication Assignee: koha-bugs(a)lists.koha-community.org Reporter: jonathan.druart+koha(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org Depends on: 28787 Bug 28787 adds the ability to send the token by email on login, but it would be great to have it available when we enable 2FA as well. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28787 [Bug 28787] Send a notice with the TOTP token -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 6

[Bug 35210] New: 2FA: more flexibility
by bugzilla-daemon＠bugs.koha-community.org 25 Feb '26

25 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35210 Bug ID: 35210 Summary: 2FA: more flexibility Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Authentication Assignee: koha-bugs(a)lists.koha-community.org Reporter: rebecca.bradshaw(a)nnuh.nhs.uk QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org Would it be possible for the 2FA to have more flexibility thank it currently does. At the moment staff need to set it up via a phone and a QR code, once this is set up there is an option to have the code emailed which is great but it does ask for 2FA each time they login. This is not helpful. Is there functionality for the 2FA to ask once a week or once a day/if signing in on a different comuputer/device? Thanks! -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 7

[Bug 28437] New: Provide 'print' as an option for patron messaging
by bugzilla-daemon＠bugs.koha-community.org 25 Feb '26

25 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28437 Bug ID: 28437 Summary: Provide 'print' as an option for patron messaging Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Notices Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org While 'Hold ready' and 'Overdue' notices fallback to print, other patron messages cannot be selected with 'print' as the message transport. Users can, however, define print notices for any letter code, indicating they are an option to generate. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3

[Bug 10190] Overdue notice triggers based on item type
by bugzilla-daemon＠bugs.koha-community.org 25 Feb '26

25 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10190 --- Comment #273 from Chloé Zermatten <chloe.zermatten(a)openfifth.co.uk> --- (In reply to Lucas Gass (lukeg) from comment #272) > Just an FYI: this patch set may conflict with Bug 30515 and Bug 40791. Thanks for the heads up! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3492] Move hold fee setting into circulation rules
by bugzilla-daemon＠bugs.koha-community.org 25 Feb '26

25 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3492 --- Comment #80 from David Cook <dcook(a)prosentient.com.au> --- (In reply to David Cook from comment #79) > It looks like this has broken koha-testing-docker? > > koha-1 | Running [sudo koha-shell kohadev -c > 'PERL5LIB=/kohadevbox/koha:/kohadevbox/koha/lib:/kohadevbox/qa-test-tools > perl /kohadevbox/misc4dev/insert_data.pl --marcflavour MARC21']... > koha-1 | $VAR1 = [ > koha-1 | > '/kohadevbox/misc4dev/data/sql/marc21/2412/after_26684/biblio.sql', > koha-1 | > '/kohadevbox/misc4dev/data/sql/marc21/2412/after_26684/biblioitems.sql', > koha-1 | > '/kohadevbox/misc4dev/data/sql/marc21/2412/after_26684/items.sql', > koha-1 | > '/kohadevbox/misc4dev/data/sql/marc21/2412/after_26684/auth_header.sql', > koha-1 | > '/kohadevbox/misc4dev/data/sql/marc21/2412/after_26684/biblio_metadata.sql' > koha-1 | ]; > koha-1 | main::configure_selfreg(): DBI Exception: DBD::mysql::db do > failed: Unknown column 'reservefee' in 'field list' at > /kohadevbox/misc4dev/insert_data.pl line 97 > koha-1 exited with code 1 > > I think the answer will be to update misc4dev but figured I'd note it here. Nevermind... I thought I'd pulled the latest KTD but it errored out. All good. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3492] Move hold fee setting into circulation rules
by bugzilla-daemon＠bugs.koha-community.org 25 Feb '26

25 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3492 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook(a)prosentient.com.au --- Comment #79 from David Cook <dcook(a)prosentient.com.au> --- It looks like this has broken koha-testing-docker? koha-1 | Running [sudo koha-shell kohadev -c 'PERL5LIB=/kohadevbox/koha:/kohadevbox/koha/lib:/kohadevbox/qa-test-tools perl /kohadevbox/misc4dev/insert_data.pl --marcflavour MARC21']... koha-1 | $VAR1 = [ koha-1 | '/kohadevbox/misc4dev/data/sql/marc21/2412/after_26684/biblio.sql', koha-1 | '/kohadevbox/misc4dev/data/sql/marc21/2412/after_26684/biblioitems.sql', koha-1 | '/kohadevbox/misc4dev/data/sql/marc21/2412/after_26684/items.sql', koha-1 | '/kohadevbox/misc4dev/data/sql/marc21/2412/after_26684/auth_header.sql', koha-1 | '/kohadevbox/misc4dev/data/sql/marc21/2412/after_26684/biblio_metadata.sql' koha-1 | ]; koha-1 | main::configure_selfreg(): DBI Exception: DBD::mysql::db do failed: Unknown column 'reservefee' in 'field list' at /kohadevbox/misc4dev/insert_data.pl line 97 koha-1 exited with code 1 I think the answer will be to update misc4dev but figured I'd note it here. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14435] Recover feature to store and access results of a report
by bugzilla-daemon＠bugs.koha-community.org 25 Feb '26

25 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14435 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=41921 -- You are receiving this mail because: You are watching all bug changes.

1 0