Koha 24.05.10 released

RELEASE NOTES FOR KOHA 24.05.10

26 May 2025

Koha is the first free and open source software library automation
package (ILS). Development is sponsored by libraries of varying types
and sizes, volunteers, and support companies from around the world. The
website for the Koha project is:

Koha 24.05.10 can be downloaded from:

Installation instructions can be found at:

  • Koha Wiki
  • OR in the INSTALL files that come in the tarball

Koha 24.05.10 is a bugfix/maintenance and security release.

It includes 2 bugfixes, one of which is a security fix.

System requirements

You can learn about the system components (like OS and database) needed for running Koha on the community wiki.

Security bugs

  • 39184 Server-side template injection leading to remote code execution

Bugfixes

Staff interface

Other bugs fixed

  • 36867 ILS-DI AuthorizedIPs should deny explicitly except those listed

    This patch updates the ILS-DI authorized IPs preference to deny all IPs not listed in the preference.

    Previously if no text was entered the ILS-DI service was accessible by all IPs, now it requires explicitly defining the IPs that can access the service.

    Upgrading libraries using ILS-DI should check that they have the necessary IPs defined in the system preference.

Documentation

The Koha manual is maintained in Sphinx. The home page for Koha
documentation is

The Git repository for the Koha manual can be found at

Translations

Complete or near-complete translations of the OPAC and staff
interface are available in this release for the following languages:

  • Arabic (ar_ARAB) (97%)
  • Armenian (hy_ARMN) (100%)
  • Bulgarian (bg_CYRL) (100%)
  • Chinese (Simplified) (88%)
  • Chinese (Traditional) (99%)
  • Czech (69%)
  • Dutch (88%)
  • English (100%)
  • English (New Zealand) (64%)
  • English (USA)
  • Finnish (100%)
  • French (99%)
  • French (Canada) (99%)
  • German (100%)
  • Greek (69%)
  • Hindi (98%)
  • Italian (83%)
  • Norwegian Bokmål (75%)
  • Persian (fa_ARAB) (97%)
  • Polish (100%)
  • Portuguese (Brazil) (99%)
  • Portuguese (Portugal) (88%)
  • Russian (95%)
  • Slovak (62%)
  • Spanish (100%)
  • Swedish (87%)
  • Telugu (69%)
  • Tetum (53%)
  • Turkish (85%)
  • Ukrainian (74%)
  • Western Armenian (hyw_ARMN) (63%)

Partial translations are available for various other languages.

The Koha team welcomes additional translations; please see

For information about translating Koha, and join the koha-translate
list to volunteer:

The most up-to-date translations can be found at:

Release Team

The release team for Koha 24.05.10 is

  • Release Manager: Katrin Fischer

  • Release Manager assistants:

    • Tomás Cohen Arazi
    • Martin Renvoize
    • Jonathan Druart
  • QA Manager: Martin Renvoize

  • QA Team:

    • Martin Renvoize
    • Marcel de Rooy
    • Jonathan Druart
    • Lucas Gass
    • Nick Clemens
    • Baptiste Wojtkowski
    • Emily Lamancusa
    • Matt Blenkinsop
    • Tomás Cohen Arazi
    • Lisette Scheer
    • David Cook
    • Paul Derscheid
    • Pedro Amorim
    • Thomas Klausner
    • Brendan Lawlor
    • Julian Maurice
    • Kyle M Hall
    • Victor Grousset
    • Owen Leonard
    • Wainui Witika-Park
    • Laura Escamilla
    • Magnus Enger
    • David Nind
  • Topic Experts:

    • UI Design — Owen Leonard
    • Zebra — Fridolin Somers
    • REST API — Tomás Cohen Arazi
  • Bug Wranglers:

    • Michaela Sieber
    • Jacob O’Mara
    • Jake Deery
  • Packaging Manager:

  • Documentation Manager: Philip Orr

  • Documentation Team:

    • Aude Charillon
    • Caroline Cyr la Rose
    • David Nind
  • Wiki curators:

    • Thomas Dukleth
    • George Williams
    • Jonathan Druart
  • Release Maintainers:

    • 24.11 — Paul Derscheid
    • 24.05 — Catalyst (Wainui Witika-Park, Alex Buckley, Aleisha Amoha)
    • 23.11 — Fridolin Somers
    • 22.11 — Jesse Maseto

Credits

We thank the following individuals who contributed patches to Koha 24.05.10

  • Nick Clemens (1)
  • David Cook (1)
  • Paul Derscheid (2)
  • Wainui Witika-Park (4)

We thank the following libraries, companies, and other institutions who contributed
patches to Koha 24.05.10

We also especially thank the following individuals who tested patches
for Koha

  • Magnus Enger (1)
  • Marcel de Rooy (1)
  • wainuiwitikapark (2)

We regret any omissions. If a contributor has been inadvertently missed,
please send a patch against these release notes to koha-devel@lists.koha-community.org.

Revision control notes

The Koha project uses Git for version control. The current development
version of Koha can be retrieved by checking out the main branch of:

The branch for this version of Koha and future bugfixes in this release
line is 24.05.x.

Bugs and feature requests

Bug reports and feature requests can be filed at the Koha bug
tracker at:

He rau ringa e oti ai.
(Many hands finish the work)

Autogenerated release notes updated last on 26 May 2025 20:27:55.