24.11, release, security

Koha 24.11.19 released

25 Aug 2026

Updated on 1st sept to fix bugs list

Koha is the first free and open source software library automation
package (ILS). Development is sponsored by libraries of varying types
and sizes, volunteers, and support companies from around the world. The
website for the Koha project is:

Koha 24.11.19 can be downloaded from:

Installation instructions can be found at:

  • Koha Wiki
  • OR in the INSTALL files that come in the tarball

Koha 24.11.19 is a bugfix/maintenance release with security patches.

It includes 5 bugfixes (3 security).

System requirements

You can learn about the system components (like OS and database) needed for running Koha on the community wiki.

Security bugs

  • 42736 SQL Injection in reports/cat_issues_top.pl via Criteria / Filter request parameters (unvalidated string context, no placeholders)
  • 42800 Potential XSS in shelf list in the erm module
  • 42904 Prevent XSS in patron restriction comments

Bugfixes

MARC Bibliographic data support

Other bugs fixed

  • 43085 Fix typo in data/marc21_field_006.xml

    This fixes the text label shown in the plugin/value builder for MARC21 006 tag when “CF – Computer Files” is selected. The label “12-18 – Undefined” was changed to “12-17 – Undefined”.

    (Change only for Koha 25.05 – made to later releases by Bug 40284 – MARC21: Adjust maxlength for 005, 006 and 007.)

    Sponsored by Toi Ohomai Institute of Technology, New Zealand

Reports

Other bugs fixed

  • 8127 Most-circulated items report doesn’t work when limited by library

    This fixes some of the filters for the “Most-circulated items” report so that using limits (the Limits section with “Limit to” and “By”) now works.

    Previously some options for “By” (such as Library and Week) generated an error message or there were no results (when results were expected).

Documentation

The Koha manual is maintained in Sphinx. The home page for Koha
documentation is

The Git repository for the Koha manual can be found at

Translations

Complete or near-complete translations of the OPAC and staff
interface are available in this release for the following languages:

– Arabic (ar_ARAB) (95%)
– Armenian (hy_ARMN) (100%)
– Azerbaijani (62%)
– Bulgarian (bg_CYRL) (100%)
– Chinese (Simplified Han script) (86%)
– Chinese (Traditional Han script) (99%)
– Czech (68%)
– Dutch (89%)
– English (100%)
– English (New Zealand) (63%)
– English (USA)
– Finnish (99%)
– French (100%)
– French (Canada) (99%)
– German (100%)
– Greek (68%)
– Hindi (97%)
– Italian (84%)
– Khmer (Central) (55%)
– Norwegian Bokmål (73%)
– Persian (fa_ARAB) (96%)
– Polish (100%)
– Portuguese (Brazil) (99%)
– Portuguese (Portugal) (88%)
– Russian (95%)
– Slovak (61%)
– Spanish (99%)
– Swedish (88%)
– Telugu (67%)
– Tetum (52%)
– Turkish (83%)
– Ukrainian (77%)
– Uzbek (52%)
– Western Armenian (hyw_ARMN) (62%)

Partial translations are available for various other languages.

The Koha team welcomes additional translations; please see

For information about translating Koha, and join the koha-translate
list to volunteer:

The most up-to-date translations can be found at:

Release Team

The release team for Koha 24.11.19 is

  • Release Manager: Pedro Amorim

  • QA Manager: Lisette Scheer

  • QA Team:

    • Marcel de Rooy
    • Martin Renvoize
    • Jonathan Druart
    • Laura Escamilla
    • Lucas Gass
    • Tomás Cohen Arazi
    • Lisette Scheer
    • Nick Clemens
    • Paul Derscheid
    • Emily Lamancusa
    • David Cook
    • Matt Blenkinsop
    • Andrew Fuerste-Henry
    • Brendan Lawlor
    • Pedro Amorim
    • Kyle M Hall
    • Aleisha Amohia
    • David Nind
    • Baptiste Wojtkowski
    • Jan Kissig
    • Katrin Fischer
    • Thomas Klausner
    • Julian Maurice
    • Owen Leonard
    • Lucas Gass

  • Documentation Manager: Aude Charillon

  • Documentation Team:

    • Philip Orr
    • Caroline Cyr La Rose
    • David Nind
    • Marion Durand

  • Translation Manager: Jonathan Druart

  • Wiki curators:

    • George Williams
    • Thomas Dukleth

  • Release Maintainers:

    • 26.05 — Lucas Gass
    • 25.11 — Baptiste Wojtkowski
    • 25.05 — Wainui Witika-Park
    • 24.11 — Fridolin Somers

  • Release Maintainer assistants:

    • 26.05 — Jacob O’Mara
    • 25.05 — Alex Buckley & Aleisha Amohia

Credits

We thank the following libraries, companies, and other institutions who are known to have sponsored
new features in Koha 24.11.19

– Toi Ohomai Institute of Technology, New Zealand

We thank the following individuals who contributed patches to Koha 24.11.19

– Jonathan Druart (1)
– Amit Gupta (1)
– Sanjar Tulkinov Anvar o’g’li (1)
– Martin Renvoize (1)
– Marcel de Rooy (1)
– Fridolin Somers (3)
– Baptiste Wojtkowski (4)

We thank the following libraries, companies, and other institutions who contributed
patches to Koha 24.11.19

– [BibLibre](https://www.biblibre.com) (7)
– Independant Individuals (1)
– informaticsglobal.ai (1)
– Koha Community Developers (1)
– [OpenFifth](https://openfifth.co.uk) (1)
– Rijksmuseum, Netherlands (1)

We also especially thank the following individuals who tested patches
for Koha

– Aleisha Amohia (1)
– David Cook (3)
– Lucas Gass (2)
– David Nind (3)
– Lawrence O’Regan-Lloyd (1)
– Martin Renvoize (2)
– Fridolin Somers (7)
– Wainui Witika-Park (1)

We regret any omissions. If a contributor has been inadvertently missed,
please send a patch against these release notes to koha-devel@lists.koha-community.org.

Revision control notes

The Koha project uses Git for version control. The current development
version of Koha can be retrieved by checking out the main branch of:

The branch for this version of Koha and future bugfixes in this release
line is 24.11.x.

Bugs and feature requests

Bug reports and feature requests can be filed at the Koha bug
tracker at:

He rau ringa e oti ai.
(Many hands finish the work)

Autogenerated release notes updated last on 01 Sep 2026 10:10:44.