# RELEASE NOTES FOR KOHA 16.5.16

24 Aug 2017

Koha is the first free and open source software library automation package (ILS). Development is sponsored by libraries of varying types and sizes, volunteers, and support companies from around the world. The website for the Koha project is:

- Koha Community

Koha 16.5.16 can be downloaded from:

- Download

Installation instructions can be found at:

- Koha Wiki
- OR in the INSTALL files that come in the tarball

Koha 16.5.16 is a security release.

It includes 30 bugfixes.

## Security bugs fixed

- [19035]

## Stored XSS in patron lists - lists.pl

[19114]

## Stored XSS in parcels.pl

[19112]

## Stored XSS in basketheader.pl page

[19110]

## XSS Stored in branches.pl

[19100]

## XSS Flaws in memberentry.pl

[19105]

## XSS Stored in holidays.pl

[16069]

## XSS issue in basket.pl

[19079]

## XSS Flaws in Membership page

[19033]

## XSS Flaws in Currencies and exchange page

[19034] XSS Flaws in- Cities - Z39.50/SRU servers administration - Patron

## categories pages

[19050]

## XSS Flaws in Quick spine label creator

[19051] XSS Flaws in - Batch record deletion page - Batch item deletion page

## - Batch item modification page

[19052]

## XSS Flaws in - vendor search page - Invoice search page

[19054]

## XSS Flaws in Report - Top Most-circulated items

[19078]

## XSS Flaws in System preferences

[18726] OPAC XSS - biblionumber

## Critical bugs fixed

### Patrons

- [18685] Patron edit/cancel floating toolbar out of place

## Other bugs fixed

### Architecture, internals, and plumbing

- [18605] Remove TRUNCATE from C4/HoldsQueue.pm
- [18632] CGI::param called in list context flooding error logs

### OPAC

- [16711] OPAC Password recovery: Handling if multiple accounts have the same mail address
- [18545] Remove use of onclick from OPAC Cart

### Patrons

- [18551] Hide with CSS dynamic elements in member search
- [18832] Missing space between icon and label in button 'Patron lists'

### System Administration

- [18965] branch transfer limits pagination save bug

### Templates

- [19000] about page - Typo in closing p tag

### Test Suite

- [18951] Some t/Biblio tests are database dependent
- [18976] Fix t/db_dependent/Auth.t cleanup
- [18982] selenium tests needs too many prerequisites
- [18991] Fix cleanup in t/db_dependent/Log.t

### Tools

- [18918] Exporting bibs in CSV when you have no CSV profiles created causes error

## System requirements

Important notes:

- Perl 5.10 is required
- Zebra is required

## Documentation

The Koha manual is maintained in DocBook.The home page for Koha documentation is

- Koha Documentation

As of the date of these release notes, only the English version of the Koha manual is available:

- Koha Manual

The Git repository for the Koha manual can be found at

- Koha Git Repository

## Translations

Complete or near-complete translations of the OPAC and staff interface are available in this release for the following languages:

- English (USA)
- Arabic (98%)
- Armenian (93%)
- Basque (77%)
- Chinese (China) (88%)
- Chinese (Taiwan) (98%)
- Czech (96%)
- Danish (72%)
- English (New Zealand) (96%)
- Finnish (98%)
- French (98%)
- French (Canada) (92%)
- German (99%)
- German (Switzerland) (99%)
- Greek (85%)
- Hindi (98%)
- Italian (99%)
- Korean (53%)
- Kurdish (51%)
- Norwegian Bokmål (59%)
- Occitan (79%)
- Persian (60%)
- Polish (100%)
- Portuguese (99%)
- Portuguese (Brazil) (89%)
- Slovak (94%)
- Spanish (99%)
- Swedish (90%)
- Turkish (99%)
- Vietnamese (74%)

Partial translations are available for various other languages.

The Koha team welcomes additional translations; please see

- Koha Translation Info

for information about translating Koha, and join the koha-translate list to volunteer:

- Koha Translate List

The most up-to-date translations can be found at:

- Koha Translation

## Release Team

The release team for Koha 16.5.16 is

- Release Manager: Brendan Gallagher
- QA Manager: Katrin Fischer
- QA Team:
  - Kyle Hall
  - Jonathan Druart
  - Tomás Cohen Arazi
  - Marcel de Rooy
  - Nick Clemens
  - Jesse Weaver
- Bug Wranglers:
  - Amit Gupta
  - Magnus Enger
  - Mirko Tietgen
  - Indranil Das Gupta
  - Zeno Tajoli
  - Marc Véron
- Packaging Manager: Mirko Tietgen
- Documentation Manager: Nicole C. Engard
- Translation Manager: Bernardo Gonzalez Kriegel
- Wiki curators:
  - Brook
  - Thomas Dukleth
- Release Maintainers:
  - 16.05 -- Frédéric Demians
  - 3.22 -- Julian Maurice
  - 3.20 -- Chris Cormack

## Credits

We thank the following libraries who are known to have sponsored new features in Koha 16.5.16:

- Catalyst IT

We thank the following individuals who contributed patches to Koha 16.5.16.

- Aleisha Amohia (2)
- Tomás Cohen Arazi (1)
- Marcel de Rooy (5)
- Jonathan Druart (11)
- Amit Gupta (20)
- Mason James (3)
- Owen Leonard (1)
- Josef Moravec (1)
- Fridolin Somers (1)
- Lari Taskula (3)
- Marc Véron (2)

We thank the following libraries, companies, and other institutions who contributed patches to Koha 16.5.16

- ACPL (1)
- BibLibre (1)
- bugs.koha-community.org (11)
- informaticsglobal.com (20)
- jns.fi (3)
- KohaAloha (3)
- Marc Véron AG (2)
- Rijksmuseum (5)
- Theke Solutions (1)
- unidentified (3)

We also especially thank the following individuals who tested patches for Koha.

- Aleisha Amohia (1)
- Amit Gupta (1)
- Andrei (4)
- Axelle Clarisse (1)
- Chris Cormack (9)
- fcouffignal (1)
- Fridolin Somers (4)
- Jesse Maseto (1)
- Jonathan Druart (17)
- Josef Moravec (2)
- Julian Maurice (1)
- Katrin Fischer (9)
- Lee Jamison (4)
- Marc Véron (3)
- Mark Tompsett (2)
- Mason James (42)
- Nick Clemens (9)
- Owen Leonard (1)
- Philippe (1)
- Tomas Cohen Arazi (5)
- Kyle M Hall (1)
- Marcel de Rooy (22)

We regret any omissions. If a contributor has been inadvertently missed, please send a patch against these release notes to koha-patches@lists.koha-community.org.

## Revision control notes

The Koha project uses Git for version control. The current development version of Koha can be retrieved by checking out the master branch of:

- Koha Git Repository

The branch for this version of Koha and future bugfixes in this release line is 16.05.x.

## Bugs and feature requests

Bug reports and feature requests can be filed at the Koha bug tracker at:

- Koha Bugzilla

He rau ringa e oti ai. (Many hands finish the work)

Autogenerated release notes updated last on 24 Aug 2017 06:36:21.