Koha 3.18.01 security release

The Koha release team would like to announce the release of Koha version 3.18.1.

This is a security release, and as such we would strongly recommend that anyone running 3.18.0 upgrades.
There should be a release for  3.16.x shortly.

Please continue reading for the full release notes:

RELEASE NOTES FOR KOHA 3.18.1
10 Dec 2014
========================================================================

Koha is the first free and open source software library automation package 
(ILS). Development is sponsored by libraries of varying types and sizes, 
volunteers, and support companies from around the world.  
The website for the Koha project is 

    
Home
Koha 3.18.1 can be downloaded from: http://download.koha-community.org/koha-3.18.01.tar.gz Installation instructions can be found at: http://wiki.koha-community.org/wiki/Installation_Documentation OR in the INSTALL files that come in the tarball Koha 3.18.1 is a security release. Security fix ============ 13425 - Facets in the OPAC have an xss vulnerability It also includes 1 enhancements and 7 bugfixes. Enhancements in 3.18.1 ====================== Packaging ---------- 13359 Provide virtual-mysql-server Depends On to facilitate alternate mysql implementations Critical bugs fixed in 3.18.1 ====================== Packaging ---------- 13377 major Automatic_renewals.pl not marked executable Other bugs fixed in 3.18.1 ====================== Architecture, internals, and plumbing ---------- 12839 normal Aqbooksellers.gstreg is never used 12841 normal Aqorders fields should not be mapped 12852 normal The "preview" param is never used in serials/claims.pl 12980 normal GetHistory does useless processing Notices ---------- 12123 normal HTML notices can break the notice viewer Reports ---------- 12567 normal Catalog Statistitics wizard's publication year doesn't work for MARC21 New sysprefs in 3.18.1 ====================== System requirements ====================== Important notes: * Perl 5.10 is required * Zebra is required Documentation ====================== The Koha manual is maintained in DocBook.The home page for Koha documentation is
Documentation
As of the date of these release notes, only the English version of the Koha manual is available: http://manual.koha-community.org/3.18/en/ The Git repository for the Koha manual can be found at http://git.koha-community.org/gitweb/?p=kohadocs.git;a=summary Translations ====================== Complete or near-complete translations of the OPAC and staff interface are available in this release for the following languages: * English (USA) * Arabic (99%) * Armenian (99%) * Czech (99%) * Danish (81%) * French (96%) * German (100%) * Italian (100%) * Kurdish (64%) * Polish (82%) * Portuguese (94%) * Slovak (100%) * Spanish (100%) * Swedish (82%) * Turkish (100%) * Vietnamese (91%) Partial translations are available for various other languages. The Koha team welcomes additional translations; please see http://wiki.koha-community.org/wiki/Translating_Koha for information about translating Koha, and join the koha-translate list to volunteer: http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-translate The most up-to-date translations can be found at: http://translate.koha-community.org/ Release Team ====================== The release team for Koha 3.18.1 is Release Manager: Tomás Cohen Arazi <tomascohen@gmail.com> Documentation Manager: Nicole C Engard <nengard@gmail.com> Translation Manager: Bernardo Gonzalez Kriegel <bgkriegel@gmail.com> QA Manager: Katrin Fischer <Katrin.Fischer@bsz-bw.de> QA Team: Galen Charlton <gmc@esilibrary.com> Jonathan Druart <jonathan.druart@biblibre.com> Brendan Gallagher <brendan@bywatersolutions.com> Kyle Hall <kyle@bywatersolutions.com> Julian Maurice <julian.maurice@biblibre.com> Paul Poulain <paul.poulain@biblibre.com> Martin Renvoize <martin.renvoize@ptfs-europe.com> Marcel de Rooy <M.de.Rooy@rijksmuseum.nl> Bug Wranglers: Alex Sassmannshausen <alex.sassmannshausen@ptfs-europe.com> Zeno Tajoli <z.tajoli@cineca.it> Packaging Manager: Robin Sheat <robin@catalyst.net.nz> Release Maintainer (3.18.x): Chris Cormack <chrisc@catalyst.net.nz> Release Maintainer (3.16.x): Mason James <mtj@kohaaloha.com> Release Maintainer (3.14.x): Fridolin Somers <fridolin.somers@biblibre.com> Credits ====================== We thank the following libraries who are known to have sponsored new features in Koha 3.18.1: We thank the following individuals who contributed patches to Koha 3.18.1. * Chris Cormack (1) * Jonathan Druart (6) * Katrin Fischer (1) * Liz Rea (1) * Robin Sheat (2) We thank the following libraries, companies, and other institutions who contributed patches to Koha 3.18.1 * BSZ BW (1) * BibLibre (6) * Catalyst (4) We also especially thank the following individuals who tested patches for Koha 3.18.1. * Brendan Gallagher (1) * Chris Cormack (11) * Katrin Fischer (4) * Martin Renvoize (1) * Mirko Tietgen (1) * Owen Leonard (1) * Paola Rossi (5) * wajasu (1) * Zeno Tajoli (1) * Tomas Cohen Arazi (10) * Kyle M Hall (3) * Marcel de Rooy (1) We regret any omissions. If a contributor has been inadvertently missed, please send a patch against these release notes to koha-patches@lists.koha-community.org. Revision control notes ====================== The Koha project uses Git for version control. The current development version of Koha can be retrieved by checking out the master branch of git://git.koha-community.org/koha.git The branch for this version of Koha and future bugfixes in this release line is 3.18.x. The last Koha release was 3.14.10, which was released on September 4, 2014. Bugs and feature requests ====================== Bug reports and feature requests can be filed at the Koha bug tracker at http://bugs.koha-community.org/ He rau ringa e oti ai. (Many hands finish the work)