Koha-clms/misc/release_notes/release_notes_24_05_07.html

378 lines
13 KiB
HTML

<h1 id="releasenotesforkoha24.05.07">RELEASE NOTES FOR KOHA 24.05.07</h1>
<p>26 Feb 2025</p>
<p>Koha is the first free and open source software library automation
package (ILS). Development is sponsored by libraries of varying types
and sizes, volunteers, and support companies from around the world. The
website for the Koha project is:</p>
<ul>
<li><a href="https://koha-community.org">Koha Community</a></li>
</ul>
<p>Koha 24.05.07 can be downloaded from:</p>
<ul>
<li><a href="https://download.koha-community.org/koha-24.05.07.tar.gz">Download</a></li>
</ul>
<p>Installation instructions can be found at:</p>
<ul>
<li><a href="https://wiki.koha-community.org/wiki/Installation_Documentation">Koha Wiki</a></li>
<li>OR in the INSTALL files that come in the tarball</li>
</ul>
<p>Koha 24.05.07 is a bugfix/maintenance release.</p>
<p>It includes 2 enhancements, 15 bugfixes and 12 security fixes.</p>
<p><strong>System requirements</strong></p>
<p>You can learn about the system components (like OS and database) needed for running Koha on the <a href="https://wiki.koha-community.org/wiki/System_requirements_and_recommendations">community wiki</a>.</p>
<h4 id="securitybugs">Security bugs</h4>
<ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28478">28478</a> MARC detail and ISBD pages still show suppressed records</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28907">28907</a> Potential unauthorized access in public REST routes</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36081">36081</a> ArticleRequestsSupportedFormats not enforced server-side</li>
<li><p><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37266">37266</a> patron_lists/delete.pl should have CSRF protection</p>
<p><strong>Sponsored by</strong> <em>Athens County Public Libraries</em></p></li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37816">37816</a> Stop SIP2 from logging passwords</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38454">38454</a> Memory (L1) cache is not flushed before API requests</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38467">38467</a> Template::Toolkit filters can create risky Javascript when not using RFC3986</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38469">38469</a> Circulation returns vulnerable to reflected XSS</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38488">38488</a> Add TT filter using HTML scrubber</li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38829">38829</a> [CVE-2025-22954] SQL Injection in lateissues-export.pl</li>
<li><p><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38961">38961</a> XSS in vendor search</p>
<p><strong>Sponsored by</strong> <em>Chetco Community Public Library</em></p></li>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39170">39170</a> Remote Code Execution within Task Scheduler</li>
</ul>
<h2 id="bugfixes">Bugfixes</h2>
<h3 id="erm">ERM</h3>
<h4 id="otherbugsfixed">Other bugs fixed</h4>
<ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37810">37810</a> Some SUSHI providers return ServiceActive instead of Service_Active</li>
</ul>
<h3 id="finesandfees">Fines and fees</h3>
<h4 id="otherbugsfixed">Other bugs fixed</h4>
<ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28097">28097</a> t/db_dependent/Koha/Account/Line.t test fails with FinesMode set to calculate</li>
</ul>
<h3 id="installationandupgradecommand-lineinstaller">Installation and upgrade (command-line installer)</h3>
<h4 id="criticalbugsfixed">Critical bugs fixed</h4>
<p><ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38779">38779</a> Record sources not working on packages install</p>
<blockquote>
<p>This fixes the record sources page (Administration > Cataloging > Record sources) for package installs - you can now add and edit record sources, instead of getting a blank page. The Koha packages were missing the required JavaScript files (/intranet-tmpl/prog/js/vue/dist/admin/record_sources_24.1100000.js"></script>) to make the page work correctly.</li>
</ul></p>
<h3 id="searching-elasticsearch">Searching - Elasticsearch</h3>
</blockquote>
<h4 id="criticalbugsfixed">Critical bugs fixed</h4>
<ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38913">38913</a> Elasticsearch indexing explodes with some oversized records with UTF-8 characters</li>
</ul>
<h2 id="enhancements">Enhancements</h2>
<h3 id="testsuite">Test Suite</h3>
<h4 id="enhancements">Enhancements</h4>
<ul>
<li><a href="https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39007">39007</a> Add last_audit to the sushi_service API spec</li>
</ul>
<h2 id="documentation">Documentation</h2>
<p>The Koha manual is maintained in Sphinx. The home page for Koha
documentation is</p>
<ul>
<li><p><a href="https://koha-community.org/documentation/">Koha Documentation</a>
As of the date of these release notes, the Koha manual is available in the following languages:</p></li>
<li><p><a href="https://koha-community.org/manual/24.05//html/">Armenian (hy_ARMN)</a> (58%)</p></li>
<li><a href="https://koha-community.org/manual/24.05//html/">Bulgarian (bg_CYRL)</a> (98%)</li>
<li><a href="https://koha-community.org/manual/24.05/zh_Hant/html/">Chinese (Traditional)</a> (99%)</li>
<li><a href="https://koha-community.org/manual/24.05//html/">English</a> (100%)</li>
<li><a href="https://koha-community.org/manual/24.05/en/html/">English (USA)</a></li>
<li><a href="https://koha-community.org/manual/24.05/fr/html/">French</a> (59%)</li>
<li><a href="https://koha-community.org/manual/24.05/de/html/">German</a> (100%)</li>
<li><a href="https://koha-community.org/manual/24.05//html/">Greek</a> (92%)</li>
<li><a href="https://koha-community.org/manual/24.05/hi/html/">Hindi</a> (71%)</li>
</ul>
<p>The Git repository for the Koha manual can be found at</p>
<ul>
<li><a href="https://gitlab.com/koha-community/koha-manual">Koha Git Repository</a></li>
</ul>
<h2 id="translations">Translations</h2>
<p>Complete or near-complete translations of the OPAC and staff
interface are available in this release for the following languages:
<div style="column-count: 2;"></p>
<ul>
<li>Arabic (ar_ARAB) (97%)</li>
<li>Armenian (hy_ARMN) (100%)</li>
<li>Bulgarian (bg_CYRL) (100%)</li>
<li>Chinese (Simplified) (88%)</li>
<li>Chinese (Traditional) (99%)</li>
<li>Czech (68%)</li>
<li>Dutch (87%)</li>
<li>English (100%)</li>
<li>English (New Zealand) (63%)</li>
<li>English (USA)</li>
<li>Finnish (99%)</li>
<li>French (100%)</li>
<li>French (Canada) (99%)</li>
<li>German (100%)</li>
<li>Greek (65%)</li>
<li>Hindi (98%)</li>
<li>Italian (82%)</li>
<li>Norwegian Bokmål (75%)</li>
<li>Persian (fa_ARAB) (97%)</li>
<li>Polish (100%)</li>
<li>Portuguese (Brazil) (99%)</li>
<li>Portuguese (Portugal) (88%)</li>
<li>Russian (94%)</li>
<li>Slovak (61%)</li>
<li>Spanish (100%)</li>
<li>Swedish (87%)</li>
<li>Telugu (69%)</li>
<li>Tetum (52%)</li>
<li>Turkish (84%)</li>
<li>Ukrainian (72%)</li>
<li>hyw_ARMN (generated) (hyw_ARMN) (63%)
</div></li>
</ul>
<p>Partial translations are available for various other languages.</p>
<p>The Koha team welcomes additional translations; please see</p>
<ul>
<li><a href="https://wiki.koha-community.org/wiki/Translating_Koha">Koha Translation Info</a></li>
</ul>
<p>For information about translating Koha, and join the koha-translate
list to volunteer:</p>
<ul>
<li><a href="https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-translate">Koha Translate List</a></li>
</ul>
<p>The most up-to-date translations can be found at:</p>
<ul>
<li><a href="https://translate.koha-community.org/">Koha Translation</a></li>
</ul>
<h2 id="releaseteam">Release Team</h2>
<p>The release team for Koha 24.05.07 is</p>
<ul>
<li><p>Release Manager: Katrin Fischer</p></li>
<li><p>Release Manager assistants:</p>
<ul>
<li>Tomás Cohen Arazi</li>
<li>Martin Renvoize</li>
<li>Jonathan Druart</li>
</ul></li>
<li><p>QA Manager: Martin Renvoize</p></li>
<li><p>QA Team:</p>
<ul>
<li>Victor Grousset</li>
<li>Lisette Scheer</li>
<li>Emily Lamancusa</li>
<li>David Cook</li>
<li>Jonathan Druart</li>
<li>Julian Maurice</li>
<li>Baptiste Wojtowski</li>
<li>Paul Derscheid</li>
<li>Aleisha Amohia</li>
<li>Laura Escamilla</li>
<li>Tomás Cohen Arazi</li>
<li>Kyle M Hall</li>
<li>Nick Clemens</li>
<li>Lucas Gass</li>
<li>Marcel de Rooy</li>
<li>Matt Blenkinsop</li>
<li>Pedro Amorim</li>
<li>Brendan Lawlor</li>
<li>Thomas Klausner</li>
</ul></li>
<li><p>Security Manager: Tomás Cohen Arazi</p></li>
<li><p>Topic Experts:</p>
<ul>
<li>UI Design -- Owen Leonard</li>
<li>REST API -- Tomás Cohen Arazi</li>
<li>Zebra -- Fridolin Somers</li>
</ul></li>
<li><p>Bug Wranglers:</p>
<ul>
<li>Michaela Sieber</li>
<li>Jacob O'Mara</li>
<li>Jake Deery</li>
</ul></li>
<li><p>Packaging Manager: Mason James</p></li>
<li><p>Documentation Manager: Philip Orr</p></li>
<li><p>Documentation Team:</p>
<ul>
<li>Aude Charillon</li>
<li>David Nind</li>
<li>Caroline Cyr La Rose</li>
</ul></li>
<li><p>Wiki curators: </p>
<ul>
<li>George Williams</li>
<li>Thomas Dukleth</li>
<li>Jonathan Druart</li>
<li>Martin Renvoize</li>
</ul></li>
<li><p>Release Maintainers:</p>
<ul>
<li>24.11 -- Paul Derscheid</li>
<li>24.05 -- Wainui Witika-Park</li>
<li>23.11 -- Fridolin Somers</li>
<li>22.11 -- Laura Escamilla</li>
</ul></li>
</ul>
<h2 id="credits">Credits</h2>
<p>We thank the following libraries, companies, and other institutions who are known to have sponsored
new features in Koha 24.05.07
<div style="column-count: 2;"></p>
<ul>
<li>Athens County Public Libraries</li>
<li>Chetco Community Public Library
</div></li>
</ul>
<p>We thank the following individuals who contributed patches to Koha 24.05.07
<div style="column-count: 2;"></p>
<ul>
<li>Pedro Amorim (2)</li>
<li>Tomás Cohen Arazi (4)</li>
<li>Matt Blenkinsop (2)</li>
<li>Alex Buckley (2)</li>
<li>Nick Clemens (1)</li>
<li>David Cook (5)</li>
<li>Jonathan Druart (8)</li>
<li>Magnus Enger (1)</li>
<li>Janusz Kaczmarek (1)</li>
<li>Owen Leonard (1)</li>
<li>Julian Maurice (1)</li>
<li>Phil Ringnalda (3)</li>
<li>Marcel de Rooy (3)</li>
<li>Lari Taskula (9)
</div></li>
</ul>
<p>We thank the following libraries, companies, and other institutions who contributed
patches to Koha 24.05.07
<div style="column-count: 2;"></p>
<ul>
<li>Athens County Public Libraries (1)</li>
<li><a href="https://www.biblibre.com">BibLibre</a> (1)</li>
<li><a href="https://bywatersolutions.com">ByWater Solutions</a> (1)</li>
<li><a href="https://www.catalyst.net.nz/products/library-management-koha">Catalyst</a> (2)</li>
<li>Chetco Community Public Library (3)</li>
<li><a href="https://www.hypernova.fi">Hypernova Oy</a> (9)</li>
<li>Independant Individuals (1)</li>
<li>Koha Community Developers (8)</li>
<li><a href="https://libriotech.no">Libriotech</a> (1)</li>
<li><a href="https://www.prosentient.com.au">Prosentient Systems</a> (5)</li>
<li><a href="https://ptfs-europe.com">PTFS Europe</a> (4)</li>
<li>Rijksmuseum, Netherlands (3)</li>
<li><a href="https://theke.io">Theke Solutions</a> (4)
</div></li>
</ul>
<p>We also especially thank the following individuals who tested patches
for Koha
<div style="column-count: 2;"></p>
<ul>
<li>Tomás Cohen Arazi (6)</li>
<li>Alex Buckley (34)</li>
<li>Nick Clemens (2)</li>
<li>David Cook (2)</li>
<li>Paul Derscheid (4)</li>
<li>Jonathan Druart (5)</li>
<li>Magnus Enger (12)</li>
<li>Katrin Fischer (3)</li>
<li>Victor Grousset (15)</li>
<li>Brendan Lawlor (1)</li>
<li>Owen Leonard (1)</li>
<li>Julian Maurice (5)</li>
<li>David Nind (3)</li>
<li>Martin Renvoize (6)</li>
<li>Phil Ringnalda (3)</li>
<li>Marcel de Rooy (19)</li>
<li>wainuiwitikapark (7)</li>
<li>Baptiste Wojtkowski (1)
</div></li>
</ul>
<p>We regret any omissions. If a contributor has been inadvertently missed,
please send a patch against these release notes to koha-devel@lists.koha-community.org.</p>
<h2 id="revisioncontrolnotes">Revision control notes</h2>
<p>The Koha project uses Git for version control. The current development
version of Koha can be retrieved by checking out the main branch of:</p>
<ul>
<li><a href="https://git.koha-community.org/koha-community/koha">Koha Git Repository</a></li>
</ul>
<p>The branch for this version of Koha and future bugfixes in this release
line is 24.05.x.</p>
<h2 id="bugsandfeaturerequests">Bugs and feature requests</h2>
<p>Bug reports and feature requests can be filed at the Koha bug
tracker at:</p>
<ul>
<li><a href="https://bugs.koha-community.org">Koha Bugzilla</a></li>
</ul>
<p>He rau ringa e oti ai.
(Many hands finish the work)</p>
<p>Autogenerated release notes updated last on 26 Feb 2025 11:06:57.</p>