- Koha-devel - lists.koha-community.org

Koha Community Newsletter: January 2025
by Michael Kuhn 27 Jan '25

27 Jan '25

The Koha Community Newsletter for January 2025 is here: https://koha-community.org/koha-community-newsletter-january-2025/ Many thanks to everyone who submitted articles and news to this newsletter! Please feel free to email me (mik(a)adminkuhn.ch) with any corrections or suggestions. Michael Kuhn Editor, Koha Community Newsletter

1 0

REMINDER: Development Jitsi meeting 22 January 2025
by Paul Derscheid 21 Jan '25

21 Jan '25

Hi all, We have a Development Jitsi meeting scheduled for tomorrow: https://wiki.koha-community.org/wiki/Development_IRC_meeting_22_January_2025 Time converter: https://www.timeanddate.com/worldclock/fixedtime.html?msg=Koha+Developers+M… Please feel free to add any topics you’d like to discuss to the agenda or let me know and I am happy to add them for you. If you are lead or supporter of a roadmap project, we will be happy to get an update on progress. See you there! Paul

1 0

Roadmap 25.05 / Update
by Fischer, Katrin 20 Jan '25

20 Jan '25

Hi all, an update on the roadmap: https://wiki.koha-community.org/wiki/Roadmap_25.05 · At the last development meeting we decided on the first 2 sprint projects: o Sprint 1: Tidy the whole codebase (starting today) o Sprint 2: Refactor modal logic · Join the new Mattermost channel ‘Sprints’ to learn more, get updates and figure out how you can help! · The slot for ‘Sprint 3’ is still to be decided about. Please add your proposals to the wiki. · The ‘other development projects’ section still looks suspiciously empty. Please let us know what you are working on for 25.05! Have a great week! Katrin -- Katrin Fischer Bibliotheksservice-Zentrum Baden-Wuerttemberg (BSZ) 78457 Konstanz / Germany Phone: +49 7531 - 88 4934 E-Mail: katrin.fischer(a)bsz-bw.de http://bsz-bw.de

1 0

BibLibre community resources, hackfest, server update, shibboleth server
by Paul Poulain 16 Jan '25

16 Jan '25

Hello everybody, BibLibre provides some technical resources for Koha (and don't plan to stop) : * mailman mailing lists * hea server * mana-kb server * translation server (https://wiki.koha-community.org/wiki/Website_Administration) Some of them are pretty old, and would deserve an update. We plan to dedicate some time during the hackfest in Marseille (march 31-apr 4) to think and work on this (keywords: linux update, container/VM) BibLibre is also willing to provide a new community resource : IDP shibboleth. That would require a shibboleth server and a LDAP one. That will also require that, as a community, we decide who will administer it. Explanation: when we want to test a patch, we may need to alter the attributes returned, or enable a new Koha URL to use the IDP. We also plan to talk about that during the hackfest. -- Paul Poulain, Associé-gérant / co-owner BibLibre, Services en logiciels libres pour les bibliothèques BibLibre, Open Source software and services for libraries

1 0

Activating preference "ILLModule" leads to error 500 in Koha 24.05
by Michael Kuhn 14 Jan '25

14 Jan '25

Hi When in Koha 24.05 trying to activate the system preference "ILLModule" it leads to error 500 when clicking Koha staff client menu "ILL requests" or clicking menu "About > System information". In file "/var/log/koha/<instancename>/plack-error.log" it says: Can't call method "GetPlugins" on an undefined value at /usr/share/koha/lib/Koha/ILL/Request/Config.pm line 118. This behavior appears in Koha 24.05.01 and 24.05.05 (but it works as expedted in 24.11) . Does anyone know the solution of this problem? Best wishes: Michael -- Geschäftsführer · Diplombibliothekar BBS, Informatiker eidg. Fachausweis Admin Kuhn GmbH · Pappelstrasse 20 · 4123 Allschwil · Schweiz T 0041 (0)61 261 55 61 · E mik(a)adminkuhn.ch · W www.adminkuhn.ch

2 2

Call for news - Newsletter January 2025
by Michael Kuhn 13 Jan '25

13 Jan '25

BETREFF: Call for news - Newsletter January 2025 Hi I'm collecting news for the January 2025 Koha Community Newsletter. Please send anything noteworthy to: kohanews (at) gmail (dot) com News criteria: * Relevant news items can be of any length. * Images are fine. * Anything and everything Koha. * Submit by the 26th of the month. Text format criteria: * Just structured plain text, or * HTML text to include tables or similar For events: * Consider adding your event to the Koha Community calendar at https://koha-community.org/calendar/ Thank you! Michael Kuhn Editor, Koha Community Newsletter

1 0

Integration troubleshooting tips after upgrading to Debian 12 (Bookworm)
by Alex Buckley 09 Jan '25

09 Jan '25

Kia ora/Hello Koha community, Over the last few months we have been upgrading the OS of our Koha, database, load balancer and VuFind servers from Debian 11 (Bullseye) to Debian 12 (Bookworm). We have noticed two things which we thought might be helpful for others: 1) Third-party integrations using Stunnel (for example EZproxy) fail after the OS upgrade, if the vendor's stunnel.conf file is configured with: /sslVersion = TLSv1./ You will see an error like this in your /var/log/stunnel4/stunnel.log: /SSL_accept: ../ssl/t1_lib.c:3364: error:0A000076:SSL routines::no suitable signature algorithm/ By default, TLSv1 is NOT considered a suitable signature algorithm in Debian Bookworm. The integration vendor needs to update their stunnel.conf to/: sslVersion = TLSv1.2 /and a stunnel restart is needed on their end and on the Koha end. --- 2) SFTP file uploads (e.g. MARC or patron csv file uploads to Koha servers) fail if the server uploading the files is using a ssh-rsa public key. You would see the following error in your /var/log/auth.log file, when the uploading server accepts to connect: /userauth_pubkey: signature algorithm ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]/ By default, Debian 12 does not support ssh-rsa public keys. Fix: A new key pair needs to be generated on the uploading server using a supported algorithm like SHA-2 or ED25519. That public key then needs to be copied into the authorized_keys file on your server to restore SFTP authorisation. We hope this information helps others. Thanks, Alex -- *Alex Buckley (he/him)* Developer, Implementation Lead | Rōpū kohinga *Catalyst.Net Limited - Expert Open Source Solutions* *Catalyst.Net Limited - a Catalyst IT group company* www.catalyst.net.nz <http://www.catalyst.net.nz> Follow Catalyst Koha on Twitter <https://twitter.com/catalystkoha> | Subscribe to the Catalyst Koha newsletter <https://catalyst.us4.list-manage.com/subscribe?u=62457ff5060d15ee3c07d3fc4&…> Catalyst Logo CONFIDENTIALITY NOTICE: This email is intended for the named recipients only. It may contain privileged, confidential or copyright information. If you are not the named recipient, any use, reliance upon, disclosure or copying of this email or its attachments is unauthorised. If you have received this email in error, please reply via email or call +64 4 499 2267.

2 2

Kohacon25
by Chris Cormack 09 Jan '25

09 Jan '25

Nau Mai, Haere Mai | Welcome to KohaCon25 We're thrilled to announce that KohaCon25 is returning to its roots in Aotearoa New Zealand! Join us as we celebrate 25 remarkable years of Koha's open-source journey in the vibrant city of Wellington. ## Event Details **Date:** 17-23 November 2025 (tentative) **Location:** Wellington, Aotearoa New Zealand **Venue:** To be announced ## Te Tīmatanga | The Beginning Twenty-five years ago, Koha was born at the Horowhenua Library Trust. Named after the Māori concept of 'koha' - a gift that strengthens communities - our library system has evolved from a local initiative into a global phenomenon, serving thousands of libraries worldwide. ## He aha ngā mahi? | Conference Program Our comprehensive program offers: * Interactive sessions with key figures in Koha's development journey * In-depth technical workshops for hands-on learning * Networking opportunities with the global Koha community * Cultural experiences showcasing Aotearoa's rich heritage * Special 25th anniversary celebrations ## Te Whanganui-a-Tara | About Wellington Wellington provides the perfect backdrop for our celebration. As New Zealand's capital city, it offers a vibrant mix of culture, technology, and library innovation. ## Historical Significance This marks our third KohaCon in Aotearoa New Zealand: - Our first celebration was the 10th anniversary - KohaCon20 was hosted during the pandemic with no international attendance - Now, KohaCon25 represents a true homecoming and international reunion ## Haere Mai | Join Us We welcome everyone to be part of this historic event: - Koha veterans from the early days - Current users and developers - Those interested in open-source library solutions - Anyone curious about the future of library technology ## Communication Channels Stay updated through our official channels: - Koha mailing list - Koha-devel mailing list - Kohacon25 channel on the Koha Mattermost The KohaCon25 website is currently under construction and will be ready in time for the call for papers. ## Call for Papers The call for papers opens February 1, 2025 and closes March 1, 2025 (tentative dates). We welcome presentations on all aspects of Koha, including: - Technical developments and innovations - Implementation case studies - Community initiatives - Future directions ## Next Steps Registration details will be announced soon. Watch for updates and early bird specials through our official communication channels. *Additional details will be provided shortly.* Chris

1 0

REMINDER: Development Jitsi meeting 8 January 2025
by Paul Derscheid 07 Jan '25

07 Jan '25

Hi all, We have a Development Jitsi meeting scheduled for tomorrow: https://wiki.koha-community.org/wiki/Next_IRC_meetings Time converter: https://www.timeanddate.com/worldclock/fixedtime.html?msg=Koha+Developers+I… Please feel free to add any topics you’d like to discuss to the agenda or let me know and I am happy to add them for you. If you are lead or supporter of a roadmap project, we will be happy to get an update on progress. See you there! Paul

1 0

Help to fix vulnerabilities
by koha＠ourlib.in 07 Jan '25

07 Jan '25

Dear Team, I am seeking recommendations and actionable solutions to mitigate following vulnerabilities while ensuring minimal impact on server performance and usability. 1:unsafe-inline unsafe-eval to be removed from the Content Security Policy {CSP} header 2:Macfee Integration or any kind of security encryption 3:block to upload specific type of file like .exe from staff interface. Your insights and feedback on best practices or tools to implement these fixes will be greatly appreciated. Regards, Vikram Zadgaonkar

1 0