From 746f2ead152a2c67fd5f39152a49668edbfea3a5 Mon Sep 17 00:00:00 2001
From: Fridolin Somers 24 Apr 2025 Koha is the first free and open source software library automation
+package (ILS). Development is sponsored by libraries of varying types
+and sizes, volunteers, and support companies from around the world. The
+website for the Koha project is: Koha 23.11.14 can be downloaded from: Installation instructions can be found at: Koha 23.11.14 is a bugfix/maintenance release. It includes 3 bugfixes and 2 security fixes. System requirements You can learn about the system components (like OS and database) needed for running Koha on the community wiki.RELEASE NOTES FOR KOHA 23.11.14
+
+
+
+
+
+
+
+Security bugs
+
+
+
++ +This patch updates the ILS-DI authorized IPs preference to deny all IPs not listed in the preference.
+ +Previously if no text was entered the ILS-DI service was accessible by all IPs, now it requires explicitly defining the IPs that can access the service.
+ +Upgrading libraries using ILS-DI should check that they have the necessary IPs defined in the system preference. +
38969 Reflected XSS vulnerability in tags + + +Bugfixes
+
+This fixes the OPAC search results page by removing a call to system preference OPACLocalCoverImagesPriority - this system preference no longer exists. (There is no visible difference to the OPAC search results page.)
+This fixes a typo in the code for OPAC password recovery - 'minPasswordPreference' to 'minPasswordLength' (the correct system preference name). It has no noticeable effect on resetting an account password from the OPAC.
38268 Callers of confirmModal need to remove the modal as the first step in their callback function
+ +++ +This fixes confirm dialog boxes in the OPAC to prevent unintended actions being taken, such as accidentally deleting a list. This specifically fixes lists, and makes a technical change to prevent this happening in the future for other areas of the OPAC (such as suggestions, tags, and self-checkout).
+ +Example of issue fixed for lists:
+ ++
+- Create a list with several items.
+- From the new list, select a couple of the items.
+- Click "Delete list" and then select "No, do not delete".
+- Then select "Remove from list", and confirm by clicking "Yes, remove from list".
+- Result: Instead of removing the items selected, the whole list was incorrectly deleted!
+
Sponsored by Chetco Community Public Library
The Koha manual is maintained in Sphinx. The home page for Koha +documentation is
+ +Koha Documentation +As of the date of these release notes, the Koha manual is available in the following languages:
Armenian (hy_ARMN) (100%)
The Git repository for the Koha manual can be found at
+ + + +Complete or near-complete translations of the OPAC and staff +interface are available in this release for the following languages:
+ +Partial translations are available for various other languages.
+ +The Koha team welcomes additional translations; please see
+ + + +For information about translating Koha, and join the koha-translate +list to volunteer:
+ + + +The most up-to-date translations can be found at:
+ + + +The release team for Koha 23.11.14 is
+ +Release Manager: Katrin Fischer
Release Manager assistants:
+ +QA Manager: Martin Renvoize
QA Team:
+ +Security Manager: Tomás Cohen Arazi
Topic Experts:
+ +Bug Wranglers:
+ +Packaging Manager: Mason James
Documentation Manager: Philip Orr
Documentation Team:
+ +Wiki curators:
+ +Release Maintainers:
+ +We thank the following libraries, companies, and other institutions who are known to have sponsored +new features in Koha 23.11.14
+ +We thank the following individuals who contributed patches to Koha 23.11.14
+ +We thank the following libraries, companies, and other institutions who contributed +patches to Koha 23.11.14
+ +We also especially thank the following individuals who tested patches +for Koha
+ +We regret any omissions. If a contributor has been inadvertently missed, +please send a patch against these release notes to koha-devel@lists.koha-community.org.
+ +The Koha project uses Git for version control. The current development +version of Koha can be retrieved by checking out the main branch of:
+ + + +The branch for this version of Koha and future bugfixes in this release +line is 23.11.x.
+ +Bug reports and feature requests can be filed at the Koha bug +tracker at:
+ + + +He rau ringa e oti ai. +(Many hands finish the work)
+ +Autogenerated release notes updated last on 24 Apr 2025 12:24:46.
diff --git a/misc/release_notes/release_notes_23_11_14.md b/misc/release_notes/release_notes_23_11_14.md new file mode 100644 index 0000000000..2265cbefbf --- /dev/null +++ b/misc/release_notes/release_notes_23_11_14.md @@ -0,0 +1,291 @@ +# RELEASE NOTES FOR KOHA 23.11.14 +24 Apr 2025 + +Koha is the first free and open source software library automation +package (ILS). Development is sponsored by libraries of varying types +and sizes, volunteers, and support companies from around the world. The +website for the Koha project is: + +- [Koha Community](https://koha-community.org) + +Koha 23.11.14 can be downloaded from: + +- [Download](https://download.koha-community.org/koha-23.11.14.tar.gz) + +Installation instructions can be found at: + +- [Koha Wiki](https://wiki.koha-community.org/wiki/Installation_Documentation) +- OR in the INSTALL files that come in the tarball + +Koha 23.11.14 is a bugfix/maintenance release. + +It includes 3 bugfixes and 2 security fixes. + +**System requirements** + +You can learn about the system components (like OS and database) needed for running Koha on the [community wiki](https://wiki.koha-community.org/wiki/System_requirements_and_recommendations). + + +#### Security bugs + +- [36867](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36867) ILS-DI AuthorizedIPs should deny explicitly except those listed + >This patch updates the ILS-DI authorized IPs preference to deny all IPs not listed in the preference. + > + >Previously if no text was entered the ILS-DI service was accessible by all IPs, now it requires explicitly defining the IPs that can access the service. + > + >Upgrading libraries using ILS-DI should check that they have the necessary IPs defined in the system preference. +- [38969](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38969) Reflected XSS vulnerability in tags + +## Bugfixes + +### Architecture, internals, and plumbing + +#### Other bugs fixed + +- [38653](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38653) Obsolete call on system preference 'OPACLocalCoverImagesPriority' + >This fixes the OPAC search results page by removing a call to system preference OPACLocalCoverImagesPriority - this system preference no longer exists. (There is no visible difference to the OPAC search results page.) + +### Patrons + +#### Other bugs fixed + +- [38772](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38772) Typo 'minPasswordPreference' system preference + >This fixes a typo in the code for OPAC password recovery - 'minPasswordPreference' to 'minPasswordLength' (the correct system preference name). It has no noticeable effect on resetting an account password from the OPAC. + +### Templates + +#### Critical bugs fixed + +- [38268](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38268) Callers of confirmModal need to remove the modal as the first step in their callback function + >This fixes confirm dialog boxes in the OPAC to prevent unintended actions being taken, such as accidentally deleting a list. This specifically fixes lists, and makes a technical change to prevent this happening in the future for other areas of the OPAC (such as suggestions, tags, and self-checkout). + > + >Example of issue fixed for lists: + >1. Create a list with several items. + >2. From the new list, select a couple of the items. + >3. Click "Delete list" and then select "No, do not delete". + >4. Then select "Remove from list", and confirm by clicking "Yes, remove from list". + >5. Result: Instead of removing the items selected, the whole list was incorrectly deleted! + + **Sponsored by** *Chetco Community Public Library* + +## Documentation + +The Koha manual is maintained in Sphinx. The home page for Koha +documentation is + +- [Koha Documentation](https://koha-community.org/documentation/) +As of the date of these release notes, the Koha manual is available in the following languages: + +- [Armenian (hy_ARMN)](https://koha-community.org/manual/23.11//html/) (100%) +- [Chinese (Traditional)](https://koha-community.org/manual/23.11/zh_Hant/html/) (99%) +- [English](https://koha-community.org/manual/23.11//html/) (100%) +- [English (USA)](https://koha-community.org/manual/23.11/en/html/) +- [French](https://koha-community.org/manual/23.11/fr/html/) (71%) +- [German](https://koha-community.org/manual/23.11/de/html/) (99%) +- [Greek](https://koha-community.org/manual/23.11//html/) (96%) +- [Hindi](https://koha-community.org/manual/23.11/hi/html/) (71%) + +The Git repository for the Koha manual can be found at + +- [Koha Git Repository](https://gitlab.com/koha-community/koha-manual) + +## Translations + +Complete or near-complete translations of the OPAC and staff +interface are available in this release for the following languages: +