- Koha-bugs - lists.koha-community.org

[Bug 41443] New: "Update Elasticsearch index" not executing
by bugzilla-daemon＠bugs.koha-community.org 12 Jan '26

12 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41443 Bug ID: 41443 Summary: "Update Elasticsearch index" not executing Initiative type: --- Sponsorship --- status: Product: Koha Version: 25.11 Hardware: All OS: All Status: NEW Severity: blocker Priority: P5 - low Component: Searching - Elasticsearch Assignee: koha-bugs(a)lists.koha-community.org Reporter: dieter.van.hassel(a)africamuseum.be QA Contact: testopia(a)bugs.koha-community.org The "Update Elasticsearch index" jobs in our Koha installation are not being picked up by the background worker. This behaviour started a while ago while still running version 23.11. Now after upgrading to Koha 25.11, the problem persists. Elasticsearch: Version: 7.17.29 | Nodes: | Status: running Switching between STOMP or polling for JobsNotificationMethod does not make any difference. Any suggestions to resolve / diagnose this issue? -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1

[Bug 36520] SQL Injection in opac-sendbasket.pl (CVE-2024-36058)
by bugzilla-daemon＠bugs.koha-community.org 12 Jan '26

12 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36520 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|SQL Injection in |SQL Injection in |opac-sendbasket.pl |opac-sendbasket.pl |(CVE-2024-36058)sas |(CVE-2024-36058) -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3050] Add an option to upload scanned invoices
by bugzilla-daemon＠bugs.koha-community.org 12 Jan '26

12 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3050 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=41591 -- You are receiving this mail because: You are watching all bug changes. You are the QA Contact for the bug.

1 0

[Bug 41584] New: Don't ask for 2FA OTP after SSO login
by bugzilla-daemon＠bugs.koha-community.org 12 Jan '26

12 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41584 Bug ID: 41584 Summary: Don't ask for 2FA OTP after SSO login Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Authentication Assignee: koha-bugs(a)lists.koha-community.org Reporter: magnus(a)libriotech.no QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org We have a setup where 2FA = Enforce, and Shibboleth is enabled. When users choose the SSO login they are redirected to the idP, sign in there and are then return to Koha. But when they are returned to Koha they are asked to provide the 2FA OTP. If they do not have 2FA set up for their account they get a blue box with information about how to set it up, and a key/QR-code. I am not sure if this happens by accident or design, but it seems to me that signing in with the idP should be enough, and Koha should not ask for further "credentials". I might be wrong, though. :-) -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 3

[Bug 36520] SQL Injection in opac-sendbasket.pl (CVE-2024-36058)sas
by bugzilla-daemon＠bugs.koha-community.org 11 Jan '26

11 Jan '26

1 0

[Bug 30209] New: Upgrade DBD::SQLite2 package to DBD::SQLite3
by bugzilla-daemon＠bugs.koha-community.org 11 Jan '26

11 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30209 Bug ID: 30209 Summary: Upgrade DBD::SQLite2 package to DBD::SQLite3 Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Packaging Assignee: koha-bugs(a)lists.koha-community.org Reporter: mtj(a)kohaaloha.com QA Contact: testopia(a)bugs.koha-community.org CC: mtj(a)kohaaloha.com the DBD::SQLite2 package has been removed in debian-testing, therefor we should upgrade to DBD::SQLite3 package only one script uses DBD::SQLite2 (misc/cronjobs/create_koc_db.pl), see BZ-4269 'create_koc_db.pl' can use both sqlite2 and sqlite3, so we can upgrade this package without a problem -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 24

[Bug 41502] New: TrackClicks description in the manual is misleading
by bugzilla-daemon＠bugs.koha-community.org 10 Jan '26

10 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41502 Bug ID: 41502 Summary: TrackClicks description in the manual is misleading Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Documentation Assignee: koha-bugs(a)lists.koha-community.org Reporter: aude.charillon(a)openfifth.co.uk QA Contact: testopia(a)bugs.koha-community.org CC: aude.charillon(a)openfifth.co.uk, david(a)davidnind.com, philip.orr(a)lmscloud.de The TrackClicks system preference is documented in the Manual at https://koha-community.org/manual/latest/en/html/opacpreferences.html#track… It says: "By setting this preference to one of the track options you will allow Koha to track every link clicked in Koha." This is incorrect: when testing I found that only clicks on the records' 856$u or item URI are tracked. The manual should be updated. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 2

[Bug 40653] New: plugins/run.pl controller drops authentication if logging in to that route
by bugzilla-daemon＠bugs.koha-community.org 10 Jan '26

10 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40653 Bug ID: 40653 Summary: plugins/run.pl controller drops authentication if logging in to that route Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Plugin architecture Assignee: koha-bugs(a)lists.koha-community.org Reporter: pedro.amorim(a)openfifth.co.uk QA Contact: testopia(a)bugs.koha-community.org A plugin that requires POSTing to plugins/run.pl will prompt authentication, but after authentication is performed, it gets dropped after the next subsequent page navigation thus causing the whole thing to fail. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 19

[Bug 38260] New: Add a community resources page to the manual
by bugzilla-daemon＠bugs.koha-community.org 10 Jan '26

10 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38260 Bug ID: 38260 Summary: Add a community resources page to the manual Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Documentation Assignee: koha-bugs(a)lists.koha-community.org Reporter: philip.orr(a)lmscloud.de QA Contact: testopia(a)bugs.koha-community.org CC: aude.charillon(a)ptfs-europe.com, philip.orr(a)lmscloud.de The Koha Manual should have a page listing other Koha Community external resources that would be useful for Koha beginners, like the Bywater Monday Minutes, the Koha-US Every Other Thursday Training Videos, etc. The page should have sections for different languages so that e.g. French Koha users can find all French language resources at a glance. We have a page on the Koha website about other docs, but it's out of date and it would be easier to find in the manual IMHO. I only know some english language resources, so if you know any resources especially in other languages please feel free to comment them here in the bug. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 9

[Bug 38614] New: Broken external links in Important links chapter
by bugzilla-daemon＠bugs.koha-community.org 10 Jan '26

10 Jan '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38614 Bug ID: 38614 Summary: Broken external links in Important links chapter Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Documentation Assignee: koha-bugs(a)lists.koha-community.org Reporter: caroline.cyr-la-rose(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org CC: aude.charillon(a)ptfs-europe.com, philip.orr(a)lmscloud.de There are too many to list here, but I used the W3C link checker to check the links in the "Important links" chapter (https://koha-community.org/manual/latest/en/html/links.html) We should remove the ones that don't work anymore. Is this page useful at all? Link check report (it takes a few minutes): https://validator.w3.org/checklink?uri=https%3A%2F%2Fkoha-community.org%2Fm… -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 2