RELEASE NOTES FOR KOHA 25.05.16

26 Oct 2026

Koha is the first free and open source software library automation package (ILS). Development is sponsored by libraries of varying types and sizes, volunteers, and support companies from around the world. The website for the Koha project is:

• Koha Community

Koha 25.05.16 can be downloaded from:

• Download

Installation instructions can be found at:

• Koha Wiki
• OR in the INSTALL files that come in the tarball

Koha 25.05.16 is a bugfix/maintenance and security release.

It includes 8 bugfixes.

System requirements

You can learn about the system components (like OS and database) needed for running Koha on the community wiki.

Security bugs

• 42946 [CVE-2026-16031] Time-based Blind SQL Injection in itemsearch.pl functionality
• 43429 Stored XSS via OPAC Report a Problem executes in staff/intranet security context (8.7 HIGH)
• 43634 cancelBulk in waitingreserves.pl is not protected against CSRF attacks
• 43707 Fix stored XSS in DT's column filters in staff interface

Bugfixes

Circulation

Other bugs fixed

• 41451 Hold history search fails when itemtype column present

  This fixes filtering on a patron's holds history when AllowHoldItemTypeSelection is enabled. This previously produced a 500 error when searching, but now works as expected.

Installation and upgrade (command-line installer)

Critical bugs fixed

• 42886 CSS files not installed

Other bugs fixed

• 42850 ILL requests stylesheet is not installed

System Administration

Other bugs fixed

• 43336 Remove support for LibrisSpellcheck

  This removes support for LibrisSpellcheck, as the API that this feature was based on was removed by the Swedish National Library.

  It removes two system preferences: LibrisKey and LibrisURL. It also removes the LibrisSpellcheck option from "Did you mean?" (Administration > Additional parameters > Did you mean?).

Deleted system preferences

• LibrisKey
• LibrisURL

Documentation

The Koha manual is maintained in Sphinx. The home page for Koha documentation is

• Koha Documentation As of the date of these release notes, the Koha manual is available in the following languages:

• English (USA)

• French (82%)
• German (84%)
• Greek (90%)
• Hindi (61%)
• Portuguese (61%)
• Portuguese (Brazil) (61%)

The Git repository for the Koha manual can be found at

• Koha Git Repository

Translations

Complete or near-complete translations of the OPAC and staff interface are available in this release for the following languages:

Partial translations are available for various other languages.

The Koha team welcomes additional translations; please see

• Koha Translation Info

For information about translating Koha, and join the koha-translate list to volunteer:

• Koha Translate List

The most up-to-date translations can be found at:

• Koha Translation

Release Team

The release team for Koha 25.05.16 is

• Release Manager: Pedro Amorim

• Release Manager assistants:

  • Tomás Cohen Arazi
  • Martin Renvoize

• QA Manager: Lisette Scheer

• QA Team:

  • Lucas Gass
  • Laura Escamilla
  • Kyle M Hall
  • Baptiste Wojtkowski
  • Victor Grousset
  • David Cook
  • Andrew Fuerste-Henry
  • Brendan Lawlor
  • Thomas Klausner
  • Paul Derscheid
  • Jan Kissig
  • Jacob O'Mara
  • Nick Clemens
  • Tomás Cohen Arazi
  • Marcel de Rooy
  • Emily Lamancusa
  • Aleisha Amohia
  • Martin Renvoize
  • David Nind

• Topic Experts:

  • Elasticsearch/OpenSearch -- Fridolin Somers
  • SIP2 -- Kyle M Hall
  • EDI -- Kyle M Hall
  • POS -- Martin Renvoize

• Bug Wranglers:

  • Michaela Sieber
  • Laura Escamilla

• Documentation Manager: Aude Charillon

• Documentation Team:

  • Caroline Cyr La Rose
  • David Nind
  • Philip Orr

• Wiki curators:

  • Thomas Dukleth
  • George Williams

• Release Maintainers:

  • 26.05 -- Lucas Gass
  • 25.11 -- Baptiste Wojtkowski
  • 25.05 -- Wainui Witika-Park (Catalyst IT)
  • 24.11 -- Fridolin Somers

• Release Maintainer assistants:

  • 26.05 -- Jacob O'Mara
  • 25.05 -- Alex Buckley & Aleisha Amohia (Catalyst IT)

Credits

We thank the following individuals who contributed patches to Koha 25.05.16

We thank the following libraries, companies, and other institutions who contributed patches to Koha 25.05.16

We also especially thank the following individuals who tested patches for Koha

We regret any omissions. If a contributor has been inadvertently missed, please send a patch against these release notes to koha-devel@lists.koha-community.org.

Revision control notes

The Koha project uses Git for version control. The current development version of Koha can be retrieved by checking out the main branch of:

• Koha Git Repository

The branch for this version of Koha and future bugfixes in this release line is 25.05.x.

Bugs and feature requests

Bug reports and feature requests can be filed at the Koha bug tracker at:

• Koha Bugzilla

He rau ringa e oti ai. (Many hands finish the work)

Autogenerated release notes updated last on 26 Oct 2026 23:58:30.