RELEASE NOTES FOR KOHA 25.05.07

28 Jan 2026

Koha is the first free and open source software library automation package (ILS). Development is sponsored by libraries of varying types and sizes, volunteers, and support companies from around the world. The website for the Koha project is:

• Koha Community

Koha 25.05.07 can be downloaded from:

• Download

Installation instructions can be found at:

• Koha Wiki
• OR in the INSTALL files that come in the tarball

Koha 25.05.07 is a bugfix/maintenance release.

It includes 10 enhancements, 8 bugfixes.

System requirements

You can learn about the system components (like OS and database) needed for running Koha on the community wiki.

Security bugs

• 41593 Authenticated SQL Injection in staff side suggestions
• 41662 CSRF-vulnerability in opac-patron-consent.pl.

Bugfixes

Acquisitions

Other bugs fixed

• 39468 EDI message status should be case insensitive

  Fix EDI message status display in acquisitions so matching is case-insensitive by converting edi_order.status to lowercase before comparison.

Architecture, internals, and plumbing

Other bugs fixed

• 40163 Several http links should be moved to https
• 40524 Stored XSS run by DataTables Print button in staff interface

  Adds a custom function to ensure cleaner outputs when using DateTable's print button.

Database

Critical bugs fixed

• 41421 Bug 35830 DB update must be idempotent

  25.11.00,25.05.06,24.11.11,24.05.16,22.11.33

Preservation

Critical bugs fixed

• 41364 Error in preservation module breadcrumb

Staff interface

Other bugs fixed

• 41217 Missing class on body tag for reserve/hold-group.tt

Enhancements

Accessibility

Enhancements

• 39677 Add the role presentation to the vertical divider in the navigation

  Accessibility improvement: Vertical dividers in the OPAC navigation now include role="presentation" to ensure they are correctly identified as decorative elements. This provides clearer semantics for assistive technologies without affecting display or design.

Architecture, internals, and plumbing

Enhancements

• 40527 Add SECURITY.md to Koha

  This enhancement adds a markdown file to the Koha project repository to make it clear how to report security issues.

• 40919 Unnecessary DB access in Koha::Item::Transfer->receive

Authentication

Enhancements

• 34164 OAuth2/OIDC should redirect to page that initiated login

REST API

Enhancements

• 39830 Add order claim object definition

Staff interface

Enhancements

• 36518 Add unique IDs to the fieldsets of the item search form to enable customization

  This enhancement adds IDs to the fieldsets on the staff interface search form (Search > Item search), to make CSS customization easier. The fieldset IDs are: - Library and location section: librarylocation - Item information section: access_and_condition - Barcode search section: barcodesearch - Call number section: callnumber_checkouts

• 38942 Item template toolbar is not like other toolbars This enhancement improves the item-template-toolbar in Koha, adding some classes to be consistent with other toolbars in Koha.
• 40757 Highlight circulation rules on click

Templates

Enhancements

• 16721 Add table configuration to serial claims table

  Sponsored by Athens County Public Libraries

• 28146 E-mail address used on error pages should respect ReplytoDefault

Documentation

The Koha manual is maintained in Sphinx. The home page for Koha documentation is

• Koha Documentation As of the date of these release notes, the Koha manual is available in the following languages:

• English (USA)

• French (74%)
• German (90%)
• Greek (94%)
• Hindi (64%)

The Git repository for the Koha manual can be found at

• Koha Git Repository

Translations

Complete or near-complete translations of the OPAC and staff interface are available in this release for the following languages:

Partial translations are available for various other languages.

The Koha team welcomes additional translations; please see

• Koha Translation Info

For information about translating Koha, and join the koha-translate list to volunteer:

• Koha Translate List

The most up-to-date translations can be found at:

• Koha Translation

Release Team

The release team for Koha 25.05.07 is

• Release Manager: Lucas Gass

• QA Manager: Martin Renvoize

• QA Team:

  • Marcel de Rooy
  • Martin Renvoize
  • Jonathan Druart
  • Laura Escamilla
  • Lucas Gass
  • Tomás Cohen Arazi
  • Lisette Scheer
  • Nick Clemens
  • Paul Derscheid
  • Emily Lamancusa
  • David Cook
  • Matt Blenkinsop
  • Andrew Fuerste-Henry
  • Brendan Lawlor
  • Pedro Amorim
  • Kyle M Hall
  • Aleisha Amohia
  • David Nind
  • Baptiste Wojtkowski
  • Jan Kissig
  • Katrin Fischer
  • Thomas Klausner
  • Julian Maurice
  • Owen Leonard

• Documentation Manager: David Nind

• Documentation Team:

  • Philip Orr
  • Aude Charillon
  • Caroline Cyr La Rose

• Translation Manager: Jonathan Druart

• Wiki curators:

  • George Williams
  • Thomas Dukleth

• Release Maintainers:

  • 25.11 -- Jacob O'Mara
  • 25.05 -- Laura Escamilla
  • 24.11 -- Fridolin Somers
  • 22.11 -- Wainui Witika-Park (Catalyst IT)

• Release Maintainer assistants:

  • 25.11 -- Chloé Zermatten
  • 24.11 -- Baptiste Wojtkowski
  • 22.11 -- Alex Buckley & Aleisha Amohia

Credits

We thank the following libraries, companies, and other institutions who are known to have sponsored new features in Koha 25.05.07

We thank the following individuals who contributed patches to Koha 25.05.07

We thank the following libraries, companies, and other institutions who contributed patches to Koha 25.05.07

We also especially thank the following individuals who tested patches for Koha

We regret any omissions. If a contributor has been inadvertently missed, please send a patch against these release notes to koha-devel@lists.koha-community.org.

Revision control notes

The Koha project uses Git for version control. The current development version of Koha can be retrieved by checking out the main branch of:

• Koha Git Repository

The branch for this version of Koha and future bugfixes in this release line is 25.05.x-security.

Bugs and feature requests

Bug reports and feature requests can be filed at the Koha bug tracker at:

• Koha Bugzilla

He rau ringa e oti ai. (Many hands finish the work)

Autogenerated release notes updated last on 28 Jan 2026 16:08:09.