24 Aug 2026
+ +Koha is the first free and open source software library automation +package (ILS). Development is sponsored by libraries of varying types +and sizes, volunteers, and support companies from around the world. The +website for the Koha project is:
+ + + +Koha 25.05.14 can be downloaded from:
+ +Installation instructions can be found at:
+ +Koha 25.05.14 is a security release.
+ +It includes 6 bugfixes.
+ +System requirements
+ +You can learn about the system components (like OS and database) needed for running Koha on the community wiki.
+ ++This change refactors the regular expression handling for Batch Item Modification, MARC Modification templates, and Callnumber splitting. It moves from Perl's traditional compile-time regular expression handling to a more dynamic (but restrictive) run-time regular expression handling more similar to Python's "sub" regex method. This functions to reduce vulnerabilities to code injection into Koha's Perl backend.
43085 Fix typo in data/marc21_field_006.xml
+ +++ +This fixes the text label shown in the plugin/value builder for MARC21 006 tag when "CF - Computer Files" is selected. The label "12-18 - Undefined" was changed to "12-17 - Undefined".
+ +(Change only for Koha 25.05 - made to later releases by Bug 40284 - MARC21: Adjust maxlength for 005, 006 and 007.)
+
Sponsored by Toi Ohomai Institute of Technology, New Zealand
+This fixes some of the filters for the "Most-circulated items" report so that using limits (the Limits section with "Limit to" and "By") now works.
+ +Previously some options for "By" (such as Library and Week) generated an error message or there were no results (when results were expected).
The Koha manual is maintained in Sphinx. The home page for Koha +documentation is
+ +Koha Documentation +As of the date of these release notes, the Koha manual is available in the following languages:
The Git repository for the Koha manual can be found at
+ + + +Complete or near-complete translations of the OPAC and staff +interface are available in this release for the following languages:
+ +Partial translations are available for various other languages.
+ +The Koha team welcomes additional translations; please see
+ + + +For information about translating Koha, and join the koha-translate +list to volunteer:
+ + + +The most up-to-date translations can be found at:
+ + + +The release team for Koha 25.05.14 is
+ +Release Manager: Pedro Amorim
Release Manager assistants:
+ +QA Manager: Lisette Scheer
QA Team:
+ +Topic Experts:
+ +Bug Wranglers:
+ +Documentation Manager: Aude Charillon
Documentation Team:
+ +Wiki curators:
+ +Release Maintainers:
+ +Release Maintainer assistants:
+ +We thank the following libraries, companies, and other institutions who are known to have sponsored +new features in Koha 25.05.14
+ +We thank the following individuals who contributed patches to Koha 25.05.14
+ +We thank the following libraries, companies, and other institutions who contributed +patches to Koha 25.05.14
+ +We also especially thank the following individuals who tested patches +for Koha
+ +We regret any omissions. If a contributor has been inadvertently missed, +please send a patch against these release notes to koha-devel@lists.koha-community.org.
+ +The Koha project uses Git for version control. The current development +version of Koha can be retrieved by checking out the main branch of:
+ + + +The branch for this version of Koha and future bugfixes in this release +line is 25.05.x.
+ +Bug reports and feature requests can be filed at the Koha bug +tracker at:
+ + + +He rau ringa e oti ai. +(Many hands finish the work)
+ +Autogenerated release notes updated last on 24 Aug 2026 03:07:51.
diff --git a/misc/release_notes/release_notes_25_05_14.md b/misc/release_notes/release_notes_25_05_14.md new file mode 100644 index 0000000000..5ceb97fcee --- /dev/null +++ b/misc/release_notes/release_notes_25_05_14.md @@ -0,0 +1,278 @@ +# RELEASE NOTES FOR KOHA 25.05.14 +24 Aug 2026 + +Koha is the first free and open source software library automation +package (ILS). Development is sponsored by libraries of varying types +and sizes, volunteers, and support companies from around the world. The +website for the Koha project is: + +- [Koha Community](https://koha-community.org) + +Koha 25.05.14 can be downloaded from: + +- [Download](https://download.koha-community.org/koha-25.05.14.tar.gz) + +Installation instructions can be found at: + +- [Koha Wiki](https://wiki.koha-community.org/wiki/Installation_Documentation) +- OR in the INSTALL files that come in the tarball + +Koha 25.05.14 is a security release. + +It includes 6 bugfixes. + +**System requirements** + +You can learn about the system components (like OS and database) needed for running Koha on the [community wiki](https://wiki.koha-community.org/wiki/System_requirements_and_recommendations). + + +#### Security bugs + +- [42736](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42736) SQL Injection in reports/cat_issues_top.pl via Criteria / Filter request parameters (unvalidated string context, no placeholders) +- [42800](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42800) Potential XSS in shelf list in the erm module +- [42904](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42904) Prevent XSS in patron restriction comments + +## Bugfixes + +### Architecture, internals, and plumbing + +#### Critical bugs fixed + +- [30233](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30233) [ZDI-CAN-29165] Remote code execution in user-supplied regex + >This change refactors the regular expression handling for Batch Item Modification, MARC Modification templates, and Callnumber splitting. It moves from Perl's traditional compile-time regular expression handling to a more dynamic (but restrictive) run-time regular expression handling more similar to Python's "sub" regex method. This functions to reduce vulnerabilities to code injection into Koha's Perl backend. + +### MARC Bibliographic data support + +#### Other bugs fixed + +- [43085](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43085) Fix typo in data/marc21_field_006.xml + >This fixes the text label shown in the plugin/value builder for MARC21 006 tag when "CF - Computer Files" is selected. The label "12-18 - Undefined" was changed to "12-17 - Undefined". + > + >(Change only for Koha 25.05 - made to later releases by Bug 40284 - MARC21: Adjust maxlength for 005, 006 and 007.) + + **Sponsored by** *Toi Ohomai Institute of Technology, New Zealand* + +### Reports + +#### Other bugs fixed + +- [8127](https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8127) Most-circulated items report doesn't work when limited by library + >This fixes some of the filters for the "Most-circulated items" report so that using limits (the Limits section with "Limit to" and "By") now works. + > + >Previously some options for "By" (such as Library and Week) generated an error message or there were no results (when results were expected). + +## Documentation + +The Koha manual is maintained in Sphinx. The home page for Koha +documentation is + +- [Koha Documentation](https://koha-community.org/documentation/) +As of the date of these release notes, the Koha manual is available in the following languages: + +- [English (USA)](https://koha-community.org/manual/25.05/en/html/) +- [French](https://koha-community.org/manual/25.05/fr/html/) (83%) +- [German](https://koha-community.org/manual/25.05/de/html/) (84%) +- [Greek](https://koha-community.org/manual/25.05/el/html/) (91%) +- [Hindi](https://koha-community.org/manual/25.05/hi/html/) (62%) + +The Git repository for the Koha manual can be found at + +- [Koha Git Repository](https://gitlab.com/koha-community/koha-manual) + +## Translations + +Complete or near-complete translations of the OPAC and staff +interface are available in this release for the following languages: +