- Koha-bugs - lists.koha-community.org

[Bug 18657] New: Inventory tool should display more
by bugzilla-daemon＠bugs.koha-community.org 04 Aug '25

04 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18657 Bug ID: 18657 Summary: Inventory tool should display more Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: gmcharlt(a)gmail.com Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Currently the tool reports: Incorrect not-for-loan values Wrong place Checked out We should have: Optional display of items w/o problems Display of missing/lost items now marked found -- You are receiving this mail because: You are watching all bug changes.

1 24

[Bug 39560] New: For authorities, hidded fields (but present in the record) will be lost when editing and saving such a record
by bugzilla-daemon＠bugs.koha-community.org 04 Aug '25

04 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39560 Bug ID: 39560 Summary: For authorities, hidded fields (but present in the record) will be lost when editing and saving such a record Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: MARC Authority data support Assignee: januszop(a)gmail.com Reporter: januszop(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org If a subfield is present in the authority record, but this subfield is marked as 'Hide all', then if you edit and save such a record, the data from hidden fields wil be lost forever. This behavior differs from bibliographic records editor, when even if a subfield is hidden (not active) in the editor it will be activated and present in the editor if present in the record. The problem affect above all records imported from external agencies. -- You are receiving this mail because: You are watching all bug changes.

1 16

[Bug 34478] Full CSRF protection
by bugzilla-daemon＠bugs.koha-community.org 04 Aug '25

04 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks|39680 | Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39680 [Bug 39680] The navigation item "Clear” in search history doesn't delete searches -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37111] New: OPAC renewal - CSRF "op must be set"
by bugzilla-daemon＠bugs.koha-community.org 04 Aug '25

04 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37111 Bug ID: 37111 Summary: OPAC renewal - CSRF "op must be set" Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: david(a)davidnind.com QA Contact: testopia(a)bugs.koha-community.org In the OPAC, when a patron clicks the "renew" link for an item they get an error: op must be set at /kohadevbox/koha/opac/opac-renew.pl line 36 in (eval) at /kohadevbox/koha/opac/opac-renew.pl line 36 33: my $query = CGI->new; 34: my $op = $query->param('op') || q{}; 35: 36: die "op must be set" unless $op eq 'cud-renew'; ... To replicate (using KTD): 1. Check some items out to a patron 2. Set the username and apssword for the patron so that you can log in as that patron. 3. Log in to the OAPC as that patron. 4. Go to Your account > Summary (the default landing page after you log in). 5. Click "Renew" for one of the items. 6. You get the error as above. -- You are receiving this mail because: You are watching all bug changes.

1 40

[Bug 35984] New: automated static code analysis should include security tests
by bugzilla-daemon＠bugs.koha-community.org 04 Aug '25

04 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35984 Bug ID: 35984 Summary: automated static code analysis should include security tests Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: evelyn(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org A few libraries have asked recently if, prior to production/during the development lifecycle, automated source code analysis tools are used to test for security flaws specifically. Typically these questions are in relation to processes like renewing cybersecurity insurance or initial discovery by a potential partner library's security/IT department. Perlcritic seems to be currently used, but as far as I can tell it appears the tests are for enforcing the coding standard. Using an automated tool to look for security flaws will be a beneficial addition to the project, so I'd like to at least start the discussion here. OWASP has an informational page for further reading: https://owasp.org/www-community/controls/Static_Code_Analysis -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 4

[Bug 30594] New: Package Crypt::CBC 2.35 or higher to increase security
by bugzilla-daemon＠bugs.koha-community.org 04 Aug '25

04 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30594 Bug ID: 30594 Summary: Package Crypt::CBC 2.35 or higher to increase security Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Packaging Assignee: koha-bugs(a)lists.koha-community.org Reporter: martin.renvoize(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org CC: mtj(a)kohaaloha.com Currently, Debian mostly comes with Crypt::CBC 2.33 pre-packaged. If we package 2.35 or above we can benefit from a performance boost as well as having the ability to update our derivation function to using the recommended pbkdf2 algorithm instead of the backwards compatible default of opensslv1. If we choose to package this, we should also update Koha::Encryption to reflect the change and use pbkdf2. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 5

[Bug 35519] New: apt install koha-common has error with koha-l10n
by bugzilla-daemon＠bugs.koha-community.org 02 Aug '25

02 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35519 Bug ID: 35519 Summary: apt install koha-common has error with koha-l10n Change sponsored?: --- Product: Koha Version: 23.05 Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Packaging Assignee: koha-bugs(a)lists.koha-community.org Reporter: wizzyrea(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: mtj(a)kohaaloha.com Tomas said he saw this too, so it's not my (really Kyle's) custom package. :) Installing koha-common with apt install koha-common=<the package version string> with 23.05.06 over the top of an older version errors out as follows: dpkg: error processing archive /tmp/apt-dpkg-install-tZKDjI/062-koha-l10n_23.05.06-1_all.deb (--unpack): trying to overwrite '/usr/share/koha/misc/translator/po/am-Ethi-installer-MARC21.po', which is also in package koha-common 23.05.05 This can be fixed by running apt install -f and subsequent installs are ok. Cheers, Liz -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 4

[Bug 37413] New: Updating an item level hold to a next available hold also modifies the other holds on the bib record when that item level hold is on an item with no barcode
by bugzilla-daemon＠bugs.koha-community.org 01 Aug '25

01 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37413 Bug ID: 37413 Summary: Updating an item level hold to a next available hold also modifies the other holds on the bib record when that item level hold is on an item with no barcode Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: Laura.escamilla(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com To recreate: * Place an item level hold on the item with no barcode * Place an item level hold on any other item * From the Holds tab, change the dropdown of the first one from "no barcode" to "next available" * Update holds * Both item level holds are now next available holds. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 29

[Bug 37014] New: "Item was not checked in" printed on next POST because of missing supplementary form
by bugzilla-daemon＠bugs.koha-community.org 01 Aug '25

01 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37014 Bug ID: 37014 Summary: "Item was not checked in" printed on next POST because of missing supplementary form Change sponsored?: --- Product: Koha Version: 23.11 Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: Circulation Assignee: nugged(a)gmail.com Reporter: nugged(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com Depends on: 8461 Created attachment 167332 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=167332&action=e… (screenshot and diagram of a potential bug) This "not_returned" feature computation logic and: [% IF ( riloo.not_returned ) %] <span class="problem">Item was not checked in</span> [% END %] Our production servers started to show "Item was not checked in" for items that had just been checked in (also for manual check-in). I noticed that this happens on the second load. I.e., when there was a modal, grayed-out content under modal is shown correctly: there is no "not checked in" message, but then circ/returns.pl page reloaded, form POST'ed again, and on next screen, it shows this "not checked in" additional message, on the next after modal, page. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8461 [Bug 8461] Block returns of withdrawn items show as 'not checked out' -- You are receiving this mail because: You are watching all bug changes.

1 27

[Bug 13823] Item search should include note fields
by bugzilla-daemon＠bugs.koha-community.org 01 Aug '25

01 Aug '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13823 David Nind <david(a)davidnind.com> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=38331 -- You are receiving this mail because: You are watching all bug changes.

1 0