gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Koha-clms/misc/release_notes/release_notes_25_11_07.html

454 lines
16 KiB
HTML
Raw Blame History

<h1 id="releasenotesforkoha25.11.07">RELEASE NOTES FOR KOHA 25.11.07</h1>
<p>06 Aug 2026</p>
<p>Koha is the first free and open source software library automation
package (ILS). Development is sponsored by libraries of varying types
and sizes, volunteers, and support companies from around the world. The
website for the Koha project is:</p>
<ul>
<li><a href="https://koha-community.org">Koha Community</a></li>
</ul>
<p>Koha 25.11.07 can be downloaded from:</p>
<ul>
<li><a href="https://download.koha-community.org/koha-25.11.07.tar.gz">Download</a></li>
</ul>
<p>Installation instructions can be found at:</p>
<ul>
<li><a href="https://wiki.koha-community.org/wiki/Installation_Documentation">Koha Wiki</a></li>
<li>OR in the INSTALL files that come in the tarball</li>
</ul>
<p>Koha 25.11.07 is a bugfix/maintenance release with security patches.</p>
<p>It includes 27 bugfixes (7 security).</p>
<p><strong>System requirements</strong></p>
<p>You can learn about the system components (like OS and database) needed for running Koha on the <a href="https://wiki.koha-community.org/wiki/System_requirements_and_recommendations">community wiki</a>.</p>
<h4 id="securitybugs">Security bugs</h4>
<p><ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30233">30233</a> Remote code execution in user-supplied regex</p>
<blockquote>
<p>This change refactors the regular expression handling for Batch Item Modification, MARC Modification templates, and Callnumber splitting. It moves from Perl's traditional compile-time regular expression handling to a more dynamic (but restrictive) run-time regular expression handling more similar to Python's "sub" regex method. This functions to reduce vulnerabilities to code injection into Koha's Perl backend.</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42471">42471</a> /cgi-bin/koha/suggestion/suggestion.pl Multiple Parameters Stored Cross-Site Scripting</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42746">42746</a> Stored SQL injection via unvalidated 'agefield' in automatic_item_modification_by_age (C4::Items::ToggleNewStatus)</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42747">42747</a> Stored SQL injection via patroncard layout image_name (patroncards/edit-layout.pl -> create-pdf.pl)</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42749">42749</a> SQL injection in acqui/parcels.pl via the orderby parameter (ORDER BY direction) reaching C4::Acquisition::GetInvoices</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42847">42847</a> SIP authentication ignored after initial successful connection</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42866">42866</a> SQL Injection in Koha/AdditionalContents.pm search_for_display via the patron lang value (stored / second-order, executed on issue-slip print, unvalidated string context, no placeholder)</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43019">43019</a> OPAC pages limited to library are readable by unauthenticated users</li>
</ul></p>
<h2 id="bugfixes">Bugfixes</h2>
</blockquote>
<h3 id="accessibility">Accessibility</h3>
<h4 id="otherbugsfixed">Other bugs fixed</h4>
<p><ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42229">42229</a> Form label used on non-form elements on opac-memberentry.tt pages</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42232">42232</a> Fieldset with missing legend on OPAC account messaging settings page (opac-messaging.tt)</p>
<blockquote>
<p>This fixes an accessibility issue on the patron's OPAC account messaging preferences form: Missing legend for the fieldset with submit changes and cancel buttons.</p>
<p>It adds a legend tag "visible" for screen reader patrons so that it is clear for the group of buttons what they are being asked to do.</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42233">42233</a> OPAC suggestions table header contains no text</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42234">42234</a> OPAC checkout history page table header contains no text
This fixes the patron checkout history table in the OPAC. It adds a title to the cover image column ("Cover image").</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42299">42299</a> OPAC detail page: star ratings has no associated label
This fixes an accessibility issue for star ratings on the OPAC record details page - it adds a label for screen reader patrons.</li>
</ul></p>
<h3 id="acquisitions">Acquisitions</h3>
</blockquote>
<h4 id="otherbugsfixed">Other bugs fixed</h4>
<ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42919">42919</a> Suggestion duplicate warning erases suggestion info</li>
</ul>
<h3 id="cataloging">Cataloging</h3>
<h4 id="otherbugsfixed">Other bugs fixed</h4>
<ul>
<li><p><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41829">41829</a> Tag editor button has wrong id on copied MARC field when value builder plugin is used</p>
<p><strong>Sponsored by</strong> <em>Koha-Suomi Oy</em></p></li>
<li><p><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42178">42178</a> The Close button submits the remove from bundle form</p>
<p><strong>Sponsored by</strong> <em>Lund University Library</em></p></li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42972">42972</a> [25.11.x] Cannot add, edit, or delete MARC overlay rules</li>
</ul>
<h3 id="circulation">Circulation</h3>
<h4 id="otherbugsfixed">Other bugs fixed</h4>
<ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41992">41992</a> Checkout History remembering Last Page</li>
</ul>
<h3 id="holdrequests">Hold requests</h3>
<h4 id="otherbugsfixed">Other bugs fixed</h4>
<ul>
<li><p><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42395">42395</a> Missing translations for the existing holds table (load_patron_holds_table) for a record in the staff interface</p>
<blockquote>
<p>This fixes the translatability of strings for the existing holds table in the staff interface for a record (Staff interface > [details page for a record] > Holds > Existing holds).</p>
<p>These strings were not previously translated:</p>
<ul>
<li>Priority column: In transit, Waiting, and In processing</li>
<li>Change priority column: tooltip text for arrows:
. Move hold up
. Move hold to top
. Move hold to bottom
. Move hold down</li>
</ul>
</blockquote>
<p><strong>Sponsored by</strong> <em>Koha-Suomi Oy</em></p></li>
</ul>
<h3 id="patrons">Patrons</h3>
<h4 id="otherbugsfixed">Other bugs fixed</h4>
<p><ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42245">42245</a> Patron search for guarantors is preselecting borrower sort values from the borrower record</p>
<blockquote>
<p>This fixes the "Add guarantor" pop-up window when adding a guarantor for a patron.</p>
<p>The form was populating the "Sort 2" field with the value from the patron you are adding the guarantor to (if they had values stored for the Sort 1 and Sort 2 fields in the library management section).</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42781">42781</a> Declare 'name' before using it in patron-format.js</li>
</ul></p>
<h3 id="searching-elasticsearch">Searching - Elasticsearch</h3>
</blockquote>
<h4 id="criticalbugsfixed">Critical bugs fixed</h4>
<ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42485">42485</a> Elasticsearch dynamic mapping date detection causes indexing failures with ARRAY MARC format</li>
</ul>
<h3 id="serials">Serials</h3>
<h4 id="otherbugsfixed">Other bugs fixed</h4>
<ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42844">42844</a> Subscription search breaks when using additional field and no search result is returned</li>
</ul>
<h3 id="templates">Templates</h3>
<h4 id="otherbugsfixed">Other bugs fixed</h4>
<ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42518">42518</a> Capitalization: Refund Payout Receipt
<blockquote>
<p>This fixes the capitalization (title case to sentence case) for a heading in the "Point of sale payout receipt (PAYOUT)" print notice template: Refund Payout Receipt --> Refund payout receipt.</p>
<p>Note: This only affects new Koha installations. Existing installations need to either manually update the notice or replace the existing notice with the default notice text.</li>
<li><p><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42695">42695</a> Minor language and markup corrections to reports error messages</p></p>
</blockquote>
<blockquote>
<p>This fixes the HTML markup for some report error messages, along with some minor text changes:</p>
<ul>
<li>Uses an H1 for the heading</li>
<li>Uses p for paragraphs</li>
</ul>
</blockquote>
<p><strong>Sponsored by</strong> <em>Athens County Public Libraries</em></p></li>
</ul>
<h3 id="testsuite">Test Suite</h3>
<h4 id="otherbugsfixed">Other bugs fixed</h4>
<ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42705">42705</a> OPAC/SCO_spec.ts is failing</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42783">42783</a> Tools/ManageMarcImport_spec.ts is still flaky</li>
</ul>
<h2 id="documentation">Documentation</h2>
<p>The Koha manual is maintained in Sphinx. The home page for Koha
documentation is</p>
<ul>
<li><p><a href="https://koha-community.org/documentation/">Koha Documentation</a>
As of the date of these release notes, the Koha manual is available in the following languages:</p></li>
<li><p><a href="https://koha-community.org/manual/25.11/en/html/">English (USA)</a></p></li>
<li><a href="https://koha-community.org/manual/25.11/fr/html/">French</a> (80%)</li>
<li><a href="https://koha-community.org/manual/25.11/de/html/">German</a> (85%)</li>
<li><a href="https://koha-community.org/manual/25.11/el/html/">Greek</a> (91%)</li>
<li><a href="https://koha-community.org/manual/25.11/hi/html/">Hindi</a> (61%)</li>
</ul>
<p>The Git repository for the Koha manual can be found at</p>
<ul>
<li><a href="https://gitlab.com/koha-community/koha-manual">Koha Git Repository</a></li>
</ul>
<h2 id="translations">Translations</h2>
<p>Complete or near-complete translations of the OPAC and staff
interface are available in this release for the following languages:</p>
<div style="column-count: 2;">
- Arabic (ar_ARAB) (89%)
- Armenian (hy_ARMN) (100%)
- Azerbaijani (64%)
- Bulgarian (bg_CYRL) (100%)
- Chinese (Simplified Han script) (81%)
- Chinese (Traditional Han script) (94%)
- Czech (65%)
- Dutch (89%)
- English (100%)
- English (New Zealand) (60%)
- English (USA)
- Finnish (99%)
- French (100%)
- French (Canada) (97%)
- German (99%)
- Greek (64%)
- Hindi (92%)
- Italian (80%)
- Khmer (Central) (58%)
- Norwegian Bokmål (69%)
- Persian (fa_ARAB) (90%)
- Polish (100%)
- Portuguese (Brazil) (99%)
- Portuguese (Portugal) (88%)
- Russian (91%)
- Slovak (57%)
- Spanish (96%)
- Swedish (88%)
- Telugu (63%)
- Turkish (78%)
- Ukrainian (73%)
- Western Armenian (hyw_ARMN) (58%)
</div>
<p>Partial translations are available for various other languages.</p>
<p>The Koha team welcomes additional translations; please see</p>
<ul>
<li><a href="https://wiki.koha-community.org/wiki/Translating_Koha">Koha Translation Info</a></li>
</ul>
<p>For information about translating Koha, and join the koha-translate
list to volunteer:</p>
<ul>
<li><a href="https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-translate">Koha Translate List</a></li>
</ul>
<p>The most up-to-date translations can be found at:</p>
<ul>
<li><a href="https://translate.koha-community.org/">Koha Translation</a></li>
</ul>
<h2 id="releaseteam">Release Team</h2>
<p>The release team for Koha 25.11.07 is</p>
<ul>
<li><p>Release Manager: Pedro Amorim</p></li>
<li><p>QA Manager: Lisette Scheer</p></li>
<li><p>QA Team:</p>
<ul>
<li>Marcel de Rooy</li>
<li>Martin Renvoize</li>
<li>Jonathan Druart</li>
<li>Laura Escamilla</li>
<li>Lucas Gass</li>
<li>Tomás Cohen Arazi</li>
<li>Lisette Scheer</li>
<li>Nick Clemens</li>
<li>Paul Derscheid</li>
<li>Emily Lamancusa</li>
<li>David Cook</li>
<li>Matt Blenkinsop</li>
<li>Andrew Fuerste-Henry</li>
<li>Brendan Lawlor</li>
<li>Pedro Amorim</li>
<li>Kyle M Hall</li>
<li>Aleisha Amohia</li>
<li>David Nind</li>
<li>Baptiste Wojtkowski</li>
<li>Jan Kissig</li>
<li>Katrin Fischer</li>
<li>Thomas Klausner</li>
<li>Julian Maurice</li>
<li>Owen Leonard</li>
<li>Lucas Gass</li>
</ul></li>
<li><p>Documentation Manager: Aude Charillon</p></li>
<li><p>Documentation Team:</p>
<ul>
<li>Philip Orr</li>
<li>Caroline Cyr La Rose</li>
<li>David Nind</li>
<li>Marion Durand</li>
</ul></li>
<li><p>Translation Manager: Jonathan Druart</p></li>
<li><p>Wiki curators:</p>
<ul>
<li>George Williams</li>
<li>Thomas Dukleth</li>
</ul></li>
<li><p>Release Maintainers:</p>
<ul>
<li>26.05 -- Lucas Gass</li>
<li>25.11 -- Baptiste Wojtkowski</li>
<li>25.05 -- Wainui Witika-Park</li>
<li>24.11 -- Fridolin Somers</li>
</ul></li>
<li><p>Release Maintainer assistants:</p>
<ul>
<li>26.05 --Jacob O'Mara</li>
<li>25.05 -- Alex Buckley &amp; Aleisha Amohia</li>
</ul></li>
</ul>
<h2 id="credits">Credits</h2>
<p>We thank the following libraries, companies, and other institutions who are known to have sponsored
new features in Koha 25.11.07</p>
<div style="column-count: 2;">
- Athens County Public Libraries
- [Koha-Suomi Oy](https://koha-suomi.fi)
- Lund University Library
</div>
<p>We thank the following individuals who contributed patches to Koha 25.11.07</p>
<div style="column-count: 2;">
- Pedro Amorim (4)
- Tomás Cohen Arazi (1)
- Kevin Carnes (1)
- Nick Clemens (1)
- David Cook (4)
- Jonathan Druart (8)
- Magnus Enger (1)
- Laura Escamilla (7)
- Lucas Gass (1)
- Kyle M Hall (2)
- Jan Kissig (1)
- Owen Leonard (4)
- David Nind (1)
- Sanjar Tulkinov Anvar o'g'li (3)
- Martin Renvoize (8)
- Johanna Räisä (1)
- Emmi Takkinen (1)
- Baptiste Wojtkowski (2)
</div>
<p>We thank the following libraries, companies, and other institutions who contributed
patches to Koha 25.11.07</p>
<div style="column-count: 2;">
- Athens County Public Libraries (4)
- [BibLibre](https://www.biblibre.com) (2)
- [ByWater Solutions](https://bywatersolutions.com) (11)
- David Nind (1)
- Independant Individuals (4)
- Koha Community Developers (8)
- [Koha-Suomi Oy](https://koha-suomi.fi) (1)
- [Libriotech](https://libriotech.no) (1)
- Lund University Library (1)
- [OpenFifth](https://openfifth.co.uk) (12)
- [Prosentient Systems](https://www.prosentient.com.au) (4)
- [Theke Solutions](https://theke.io) (1)
- Wildau University of Technology (1)
</div>
<p>We also especially thank the following individuals who tested patches
for Koha</p>
<div style="column-count: 2;">
- Aleisha Amohia (1)
- Nick Clemens (2)
- David Cook (5)
- Jonathan Druart (7)
- Laura Escamilla (6)
- Andrew Fuerste-Henry (1)
- Lucas Gass (23)
- Jan Kissig (2)
- Brendan Lawlor (2)
- Owen Leonard (2)
- David Nind (9)
- Sanjar Tulkinov Anvar o'g'li (5)
- Eric Phetteplace (1)
- Martin Renvoize (12)
- Phil Ringnalda (1)
- Marcel de Rooy (4)
- Michaela Sieber (1)
- Baptiste Wojtkowski (30)
</div>
<p>We regret any omissions. If a contributor has been inadvertently missed,
please send a patch against these release notes to koha-devel@lists.koha-community.org.</p>
<h2 id="revisioncontrolnotes">Revision control notes</h2>
<p>The Koha project uses Git for version control. The current development
version of Koha can be retrieved by checking out the main branch of:</p>
<ul>
<li><a href="https://git.koha-community.org/koha-community/koha">Koha Git Repository</a></li>
</ul>
<p>The branch for this version of Koha and future bugfixes in this release
line is 25.11.x.</p>
<h2 id="bugsandfeaturerequests">Bugs and feature requests</h2>
<p>Bug reports and feature requests can be filed at the Koha bug
tracker at:</p>
<ul>
<li><a href="https://bugs.koha-community.org">Koha Bugzilla</a></li>
</ul>
<p>He rau ringa e oti ai.
(Many hands finish the work)</p>
<p>Autogenerated release notes updated last on 06 Aug 2026 14:57:11.</p>
Reference in New Issue View Git Blame Copy Permalink