Koha 16.05.05 Released

Posted on Posted in 16.05, release, releases, security Tagged with ,

It is with great pleasure that we announce the release of Koha 16.05.05, a
maintenance release of the Koha open source integrated library system.

Koha is the first free and open source software library automation
package (ILS). Development is sponsored by libraries of varying types
and sizes, volunteers, and support companies from around the world. The
website for the Koha project is:

Koha 16.5.5 can be downloaded from:

Installation instructions can be found at:

  • Koha Wiki
  • OR in the INSTALL files that come in the tarball

Koha 16.5.5 is a bugfix/maintenance release with security fixes.

It includes 3 security fixes, 8 enhancements, 51 bugfixes.

Security bugs

Koha

  • [16800] Stored Cross-site Scripting vulnerability in addbiblio.pl
  • [17035] Koha allows system-wide ‘read’ access to all Koha zebra databases, by default
  • [17365] SQL Injection & XSS attack in memberentry.pl

Enhancements

Acquisitions

  • [9896] Show vendor in subscription search when creating an order for a subscription

Circulation

  • [17331] Show holding branch in holds awaiting pickup report

Command-line Utilities

  • [10337] Add a script to insert all sample data automatically
  • [17444] Export by date and time in export_record.pl

OPAC

  • [15388] Show Syndetics covers by UPC in search results

Patrons

  • [17154] Note column is missing on account lines receipt

Templates

  • [17056] Remove event attributes from various templates

Test Suite

  • [17304] C4::Matcher::getmatch_keys is not tested

Critical bugs fixed

Architecture, internals, and plumbing

  • [17342] Plack does not work after upgrading to 3.22.11 and 16.05.04

Cataloging

  • [17477] Duplicating a subfield yields an empty subfield tag

Installation and upgrade (command-line installer)

  • [17292] Use of DBIx in updatedatabase.pl broke upgrade (from bug 12375)

Installation and upgrade (web-based installer)

  • [16573] Web installer fails to load structure and sample data on MySQL 5.7
  • [17324] branchcode is NULL in letter triggers red upgrade message

OPAC

  • [17392] opac/svc/overdrive_proxy is not plack safe
  • [17393] selfreg – Patron’s info are not correctly inserted if contain non-Latin characters

Patrons

  • [11217] The # in accountlines descriptions makes them un-writeoffable
  • [17403] Internal Server Error while deleting patron

Searching

  • [16838] Elasticsearch – mapping tables are not populated on new installs

System Administration

  • [17389] Exporting framework always export the default framework

Other bugs fixed

About

  • [7143] Bug for tracking changes to the about page
  • [13405] System information has misleading information about indexing mode

Architecture, internals, and plumbing

  • [14060] Remove readonly on date inputs
  • [14707] Change UsageStatsCountry from free text to a dropdown list
  • [17294] reserves_stats.pl is not plack safe
  • [17368] plugins tests are broken – KitchenSinkPlugin
  • [17372] Elasticsearch paths need to be standardized
  • [17411] Change exit 1 to exit 0 in acqui/basket.pl to prevent Internal Server Error
  • [17426] AutoCommit should not be set in tests
  • [17446] Remove some seleted typos

Cataloging

  • [7045] Default-value substitution inconsistent
  • [16245] RIS export file type incorrect
  • [16358] Rancor – Deleting records when Rancor is enabled just opens them
  • [17405] Edit record uses Default framework

Circulation

  • [10768] Improve the interface related to itemBarcodeFallbackSearch
  • [17310] Broken URLs in ‘Item renewed’ / ‘Cannot renew’ messages
  • [17352] Patron search type is hard coded to ‘contain’ in circ/circulation.pl

Command-line Utilities

  • [2389] overdue_notices.pl needs a test mode
  • [17088] Bad MARC XML can halt export_records.pl

Hold requests

  • [14514] LocalHoldsPriority and the HoldsQueue conflict with each other

I18N/L10N

  • [16687] Translatability: Fix issues with sentence splitting in Administration preferences
  • [17245] Untranslatable abbreviated names of seasons
  • [17322] Translation breaks opac-ics.tt

Installation and upgrade (web-based installer)

  • [17357] WTHDRAWN is still used in installer files
  • [17358] Authorised values: COU>COUNTRY | LAN>LANG

Lists

  • [17315] Can’t add entry to lists using link in result list
  • [17316] Possible to see name of lists you don’t own

OPAC

  • [17296] Failed to correctly configure AnonymousPatron with AnonSuggestions should display a warning in about
  • [17367] Showing all items must keep show holdings tab in OPAC details

Packaging

  • [17085] Specify libmojolicious-perl min version

Patrons

  • [17404] Patron deletion page: Fix title and breadcrumb
  • [17423] patronimage.pl permission is too restrictive

Reports

  • [16816] Duplicate button on report results copies parameters used

Serials

  • [17300] Serials search does not return any results

Staff Client

  • [17144] Fix variable scope issue in edi_accounts.pl (Internal server error with plack)

System Administration

  • [16035] MARC framework Export misbehaving

Templates

  • [17289] Holds awaiting pickup shows date unformatted
  • [17312] Typo in members-toolbar.inc / moremember-brief.tt / moremember.tt

Test Suite

  • [17430] MarkIssueReturned.t should create its own data
  • [17441] t/db_dependent/Letters.t fails on Jenkins

System requirements

Important notes:

  • Perl 5.10 is required
  • Zebra is required

Documentation

The Koha manual is maintained in DocBook.The home page for Koha
documentation is

As of the date of these release notes, only the English version of the
Koha manual is available:

The Git repository for the Koha manual can be found at

Translations

Complete or near-complete translations of the OPAC and staff
interface are available in this release for the following languages:

  • English (USA)
  • Arabic (99%)
  • Armenian (95%)
  • Chinese (China) (89%)
  • Chinese (Taiwan) (100%)
  • Czech (96%)
  • Danish (74%)
  • English (New Zealand) (98%)
  • Finnish (92%)
  • French (96%)
  • French (Canada) (92%)
  • German (99%)
  • German (Switzerland) (99%)
  • Greek (77%)
  • Hindi (100%)
  • Italian (100%)
  • Korean (54%)
  • Kurdish (52%)
  • Norwegian BokmÃ¥l (60%)
  • Occitan (94%)
  • Persian (61%)
  • Polish (99%)
  • Portuguese (99%)
  • Portuguese (Brazil) (90%)
  • Slovak (95%)
  • Spanish (99%)
  • Swedish (79%)
  • Turkish (99%)
  • Vietnamese (75%)

Partial translations are available for various other languages.

The Koha team welcomes additional translations; please see

for information about translating Koha, and join the koha-translate
list to volunteer:

The most up-to-date translations can be found at:

Release Team

The release team for Koha 16.5.5 is

Credits

We thank the following libraries who are known to have sponsored
new features in Koha 16.5.5:

  • Catalyst IT
  • Universidad de El Salvador

We thank the following individuals who contributed patches to Koha 16.5.5.

  • Marc (4)
  • Aleisha Amohia (1)
  • Hector Castro (2)
  • Nick Clemens (4)
  • Tomas Cohen Arazi (6)
  • Frédéric Demians (5)
  • Marcel de Rooy (5)
  • Jonathan Druart (38)
  • Julian FIOL (1)
  • Katrin Fischer (1)
  • Mason James (1)
  • Andreas Jonsson (1)
  • Rafal Kopaczka (1)
  • Owen Leonard (1)
  • Jesse Maseto (1)
  • Sophie Meynieux (1)
  • Kyle M Hall (5)
  • Josef Moravec (1)
  • Andreas Roussos (5)
  • Rodrigo Santellan (1)
  • Fridolin Somers (2)
  • Zeno Tajoli (1)
  • Mirko Tietgen (1)
  • Mark Tompsett (2)
  • Marc Véron (3)

We thank the following libraries, companies, and other institutions who contributed
patches to Koha 16.5.5

  • abunchofthings.net (1)
  • ACPL (1)
  • BibLibre (7)
  • BSZ BW (1)
  • bugs.koha-community.org (35)
  • ByWater-Solutions (10)
  • Cineca (1)
  • KohaAloha (1)
  • kreablo.se (1)
  • Marc Véron AG (7)
  • poczta.onet.pl (1)
  • Rijksmuseum (5)
  • Tamil (5)
  • Theke Solutions (6)
  • unidentified (12)

We also especially thank the following individuals who tested patches
for Koha.

  • Aleisha Amohia (2)
  • Andreas Roussos (2)
  • Barbara.Johnson@bedfordtx.gov (1)
  • Barton Chittenden (2)
  • Brendan Gallagher (29)
  • Chris Cormack (16)
  • Claire Gravely (3)
  • Dani Elder (2)
  • David Cook (1)
  • Frédéric Demians (87)
  • Hector Castro (5)
  • Jonathan Druart (20)
  • Josef Moravec (2)
  • Juliette (1)
  • Katrin Fischer (1)
  • Magnus Enger (1)
  • Marc (3)
  • Marc Véron (9)
  • Mark Tompsett (4)
  • Martin Renvoize (2)
  • Michael Kuhn (1)
  • Mirko Tietgen (1)
  • Nick Clemens (17)
  • Owen Leonard (11)
  • radiuscz (1)
  • remy (1)
  • Katrin Fischer (37)
  • Tomas Cohen Arazi (5)
  • Barton Chittenden barton@bywatersolutions.com (1)
  • Kyle M Hall (62)
  • Bernardo Gonzalez Kriegel (2)
  • Marcel de Rooy (13)

We regret any omissions. If a contributor has been inadvertently missed,
please send a patch against these release notes to
koha-patches@lists.koha-community.org.

Revision control notes

The Koha project uses Git for version control. The current development
version of Koha can be retrieved by checking out the master branch of:

The branch for this version of Koha and future bugfixes in this release
line is 16.05.x.
The last Koha release was 3.22.8, which was released on June 24, 2016.

Bugs and feature requests

Bug reports and feature requests can be filed at the Koha bug
tracker at:

He rau ringa e oti ai.
(Many hands finish the work)