From 58302e109246e9d74b6deae67b1a0bd56c431fe2 Mon Sep 17 00:00:00 2001
From: Wainui Witika-Park 24 Apr 2025 Koha is the first free and open source software library automation
+package (ILS). Development is sponsored by libraries of varying types
+and sizes, volunteers, and support companies from around the world. The
+website for the Koha project is: Koha 24.05.09 can be downloaded from: Installation instructions can be found at: Koha 24.05.09 is a bugfix/maintenance release. It includes 8 bugfixes. System requirements You can learn about the system components (like OS and database) needed for running Koha on the community wiki.RELEASE NOTES FOR KOHA 24.05.09
+
+
+
+
+
+
+
+Security bugs
+
+
+
++ +This patch updates the ILS-DI authorized IPs preference to deny all IPs not listed in the preference.
+ +Previously if no text was entered the ILS-DI service was accessible by all IPs, now it requires explicitly defining the IPs that can access the service.
+ +Upgrading libraries using ILS-DI should check that they have the necessary IPs defined in the system preference. +
38969 Reflected XSS vulnerability in tags + + +Bugfixes
+
+This fixes closing and reopening of invoices (Acquisitions > [Vendor] > Invoices). Previously, the invoices you selected weren't closed or reopened when clicking on the "Close/Reopen selected invoices" button - all that happened was that one of the selected invoices was displayed instead. (This is related to the CSRF changes added in Koha 24.05 to improve form security.)
+This fixes the OPAC search results page by removing a call to system preference OPACLocalCoverImagesPriority - this system preference no longer exists. (There is no visible difference to the OPAC search results page.)
+This fixes the display of recalls in the holdings table - the "Recalled by [patron] on [date]" message now only shows for item-level recalls. Previously, the message was displayed for all items when a record-level recall was made.
+This fixes failing ERM usage tests.
+This fixes a typo in the code for OPAC password recovery - 'minPasswordPreference' to 'minPasswordLength' (the correct system preference name). It has no noticeable effect on resetting an account password from the OPAC.
38268 Callers of confirmModal need to remove the modal as the first step in their callback function
+ +++ +This fixes confirm dialog boxes in the OPAC to prevent unintended actions being taken, such as accidentally deleting a list. This specifically fixes lists, and makes a technical change to prevent this happening in the future for other areas of the OPAC (such as suggestions, tags, and self-checkout).
+ +Example of issue fixed for lists:
+ ++
+- Create a list with several items.
+- From the new list, select a couple of the items.
+- Click "Delete list" and then select "No, do not delete".
+- Then select "Remove from list", and confirm by clicking "Yes, remove from list".
+- Result: Instead of removing the items selected, the whole list was incorrectly deleted!
+
Sponsored by Chetco Community Public Library
The Koha manual is maintained in Sphinx. The home page for Koha +documentation is
+ +Koha Documentation +As of the date of these release notes, the Koha manual is available in the following languages:
Armenian (hy_ARMN) (100%)
The Git repository for the Koha manual can be found at
+ + + +Complete or near-complete translations of the OPAC and staff +interface are available in this release for the following languages:
+ +Partial translations are available for various other languages.
+ +The Koha team welcomes additional translations; please see
+ + + +For information about translating Koha, and join the koha-translate +list to volunteer:
+ + + +The most up-to-date translations can be found at:
+ + + +The release team for Koha 24.05.09 is
+ +Release Manager: Katrin Fischer
Release Manager assistants:
+ +QA Manager: Martin Renvoize
QA Team:
+ +Security Manager: Tomás Cohen Arazi
Topic Experts:
+ +Bug Wranglers:
+ +Packaging Manager: Mason James
Documentation Manager: Philip Orr
Documentation Team:
+ +Wiki curators:
+ +Release Maintainers:
+ +We thank the following libraries, companies, and other institutions who are known to have sponsored +new features in Koha 24.05.09
+ +We thank the following individuals who contributed patches to Koha 24.05.09
+ +We thank the following libraries, companies, and other institutions who contributed +patches to Koha 24.05.09
+ +We also especially thank the following individuals who tested patches +for Koha
+ +We regret any omissions. If a contributor has been inadvertently missed, +please send a patch against these release notes to koha-devel@lists.koha-community.org.
+ +The Koha project uses Git for version control. The current development +version of Koha can be retrieved by checking out the main branch of:
+ + + +The branch for this version of Koha and future bugfixes in this release +line is 24.05.x.
+ +Bug reports and feature requests can be filed at the Koha bug +tracker at:
+ + + +He rau ringa e oti ai. +(Many hands finish the work)
+ +Autogenerated release notes updated last on 24 Apr 2025 05:00:21.
diff --git a/misc/release_notes/release_notes_24_05_09.md b/misc/release_notes/release_notes_24_05_09.md new file mode 100644 index 0000000000..64138b3295 --- /dev/null +++ b/misc/release_notes/release_notes_24_05_09.md @@ -0,0 +1,317 @@ +# RELEASE NOTES FOR KOHA 24.05.09 +24 Apr 2025 + +Koha is the first free and open source software library automation +package (ILS). Development is sponsored by libraries of varying types +and sizes, volunteers, and support companies from around the world. The +website for the Koha project is: + +- [Koha Community](https://koha-community.org) + +Koha 24.05.09 can be downloaded from: + +- [Download](https://download.koha-community.org/koha-24.05.09.tar.gz) + +Installation instructions can be found at: + +- [Koha Wiki](https://wiki.koha-community.org/wiki/Installation_Documentation) +- OR in the INSTALL files that come in the tarball + +Koha 24.05.09 is a bugfix/maintenance release. + +It includes 8 bugfixes. + +**System requirements** + +You can learn about the system components (like OS and database) needed for running Koha on the [community wiki](https://wiki.koha-community.org/wiki/System_requirements_and_recommendations). + + +#### Security bugs + +- [36867](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36867) ILS-DI AuthorizedIPs should deny explicitly except those listed + >This patch updates the ILS-DI authorized IPs preference to deny all IPs not listed in the preference. + > + >Previously if no text was entered the ILS-DI service was accessible by all IPs, now it requires explicitly defining the IPs that can access the service. + > + >Upgrading libraries using ILS-DI should check that they have the necessary IPs defined in the system preference. +- [38969](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38969) Reflected XSS vulnerability in tags + +## Bugfixes + +### Acquisitions + +#### Other bugs fixed + +- [38155](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38155) Can't close invoices using checkboxes from invoices.pl + >This fixes closing and reopening of invoices (Acquisitions > [Vendor] > Invoices). Previously, the invoices you selected weren't closed or reopened when clicking on the "Close/Reopen selected invoices" button - all that happened was that one of the selected invoices was displayed instead. (This is related to the CSRF changes added in Koha 24.05 to improve form security.) + +### Architecture, internals, and plumbing + +#### Other bugs fixed + +- [38653](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38653) Obsolete call on system preference 'OPACLocalCoverImagesPriority' + >This fixes the OPAC search results page by removing a call to system preference OPACLocalCoverImagesPriority - this system preference no longer exists. (There is no visible difference to the OPAC search results page.) + +### Circulation + +#### Other bugs fixed + +- [38512](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38512) Item table status column display is wrong when record has recalls + >This fixes the display of recalls in the holdings table - the "Recalled by [patron] on [date]" message now only shows for item-level recalls. Previously, the message was displayed for all items when a record-level recall was made. + +### ERM + +#### Other bugs fixed + +- [38782](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38782) ERM eUsage related tests are failing + >This fixes failing ERM usage tests. + +### Patrons + +#### Other bugs fixed + +- [38772](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38772) Typo 'minPasswordPreference' system preference + >This fixes a typo in the code for OPAC password recovery - 'minPasswordPreference' to 'minPasswordLength' (the correct system preference name). It has no noticeable effect on resetting an account password from the OPAC. + +### Templates + +#### Critical bugs fixed + +- [38268](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38268) Callers of confirmModal need to remove the modal as the first step in their callback function + >This fixes confirm dialog boxes in the OPAC to prevent unintended actions being taken, such as accidentally deleting a list. This specifically fixes lists, and makes a technical change to prevent this happening in the future for other areas of the OPAC (such as suggestions, tags, and self-checkout). + > + >Example of issue fixed for lists: + >1. Create a list with several items. + >2. From the new list, select a couple of the items. + >3. Click "Delete list" and then select "No, do not delete". + >4. Then select "Remove from list", and confirm by clicking "Yes, remove from list". + >5. Result: Instead of removing the items selected, the whole list was incorrectly deleted! + + **Sponsored by** *Chetco Community Public Library* + +## Documentation + +The Koha manual is maintained in Sphinx. The home page for Koha +documentation is + +- [Koha Documentation](https://koha-community.org/documentation/) +As of the date of these release notes, the Koha manual is available in the following languages: + +- [Armenian (hy_ARMN)](https://koha-community.org/manual/24.05//html/) (100%) +- [Chinese (Traditional)](https://koha-community.org/manual/24.05/zh_Hant/html/) (99%) +- [English](https://koha-community.org/manual/24.05//html/) (100%) +- [English (USA)](https://koha-community.org/manual/24.05/en/html/) +- [French](https://koha-community.org/manual/24.05/fr/html/) (71%) +- [German](https://koha-community.org/manual/24.05/de/html/) (99%) +- [Greek](https://koha-community.org/manual/24.05//html/) (96%) +- [Hindi](https://koha-community.org/manual/24.05/hi/html/) (71%) + +The Git repository for the Koha manual can be found at + +- [Koha Git Repository](https://gitlab.com/koha-community/koha-manual) + +## Translations + +Complete or near-complete translations of the OPAC and staff +interface are available in this release for the following languages: +