1 # RELEASE NOTES FOR KOHA 17.05.03
4 Koha is the first free and open source software library automation
5 package (ILS). Development is sponsored by libraries of varying types
6 and sizes, volunteers, and support companies from around the world. The
7 website for the Koha project is:
9 - [Koha Community](http://koha-community.org)
11 Koha 17.05.03 can be downloaded from:
13 - [Download](http://download.koha-community.org/koha-17.05.03.tar.gz)
15 Installation instructions can be found at:
17 - [Koha Wiki](http://wiki.koha-community.org/wiki/Installation_Documentation)
18 - OR in the INSTALL files that come in the tarball
20 Koha 17.05.03 is a security release.
22 It includes 3 enhancements, 13 bugfixes and 16 security fixes.
25 ## Security bugs fixed
27 - [[19035]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19035) Stored XSS in patron lists - lists.pl
28 - [[19114]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19114) Stored XSS in parcels.pl
29 - [[19112]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19112) Stored XSS in basketheader.pl page
30 - [[19110]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19110) XSS Stored in branches.pl
31 - [[19100]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19100) XSS Flaws in memberentry.pl
32 - [[19105]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19105) XSS Stored in holidays.pl
33 - [[16069]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=16069) XSS issue in basket.pl
34 - [[19079]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19079) XSS Flaws in Membership page
35 - [[19033]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19033) XSS Flaws in Currencies and exchange page
36 - [[19034]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19034) XSS Flaws in- Cities - Z39.50/SRU servers administration - Patron categories pages
37 - [[19050]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19050) XSS Flaws in Quick spine label creator
38 - [[19051]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19051) XSS Flaws in - Batch record deletion page - Batch item deletion page - Batch item modification page
39 - [[19052]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19052) XSS Flaws in - vendor search page - Invoice search page
40 - [[19054]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19054) XSS Flaws in Report - Top Most-circulated items
41 - [[19078]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19078) XSS Flaws in System preferences
42 - [[18726]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18726) OPAC XSS - biblionumber
48 - [[18839]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18839) suggestion.pl: 'unknown' is spelled 'unkown'
50 ### Architecture, internals, and plumbing
52 - [[18361]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18361) Koha::Objects->find should accept composite primary keys
53 - [[18539]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18539) Forbid Koha::Objects->find calls in list context
56 ## Critical bugs fixed
60 - [[18987]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18987) When browsing for a patron by last name the page processes indefinitely
65 ### Architecture, internals, and plumbing
67 - [[18605]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18605) Remove TRUNCATE from C4/HoldsQueue.pm
71 - [[18367]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18367) Fix untranslatable string from Bug 18264
75 - [[18545]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18545) Remove use of onclick from OPAC Cart
79 - [[18832]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18832) Missing space between icon and label in button 'Patron lists'
81 ### System Administration
83 - [[18965]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18965) branch transfer limits pagination save bug
87 - [[19000]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19000) about page - Typo in closing p tag
91 - [[18951]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18951) Some t/Biblio tests are database dependent
92 - [[18976]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18976) Fix t/db_dependent/Auth.t cleanup
93 - [[18977]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18977) Rollback branch in t/db_dependent/SIP/Message.t
94 - [[18982]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18982) selenium tests needs too many prerequisites
95 - [[18991]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18991) Fix cleanup in t/db_dependent/Log.t
99 - [[18918]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18918) Exporting bibs in CSV when you have no CSV profiles created causes error
103 ## System requirements
107 - Perl 5.10 is required
112 The Koha manual is maintained in DocBook.The home page for Koha
115 - [Koha Documentation](http://koha-community.org/documentation/)
117 As of the date of these release notes, only the English version of the
118 Koha manual is available:
120 - [Koha Manual](http://manual.koha-community.org//en/)
122 The Git repository for the Koha manual can be found at
124 - [Koha Git Repository](http://git.koha-community.org/gitweb/?p=kohadocs.git;a=summary)
128 Complete or near-complete translations of the OPAC and staff
129 interface are available in this release for the following languages:
134 - Chinese (China) (83%)
135 - Chinese (Taiwan) (100%)
138 - English (New Zealand) (91%)
141 - French (Canada) (91%)
143 - German (Switzerland) (99%)
147 - Norwegian Bokmål (57%)
152 - Portuguese (Brazil) (85%)
159 Partial translations are available for various other languages.
161 The Koha team welcomes additional translations; please see
163 - [Koha Translation Info](http://wiki.koha-community.org/wiki/Translating_Koha)
165 for information about translating Koha, and join the koha-translate
168 - [Koha Translate List](http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-translate)
170 The most up-to-date translations can be found at:
172 - [Koha Translation](http://translate.koha-community.org/)
176 The release team for Koha 17.05.03 is
178 - Release Manager: [Jonathan Druart](mailto:jonathan.druart@bugs.koha-community.org)
180 - [Alex Sassmannshausen](mailto:alex.sassmannshausen@ptfs-europe.com)
181 - [Martin Renvoize](mailto:martin.renvoize@ptfs-europe.com)
183 - [Brendan Gallagher](mailto:brendan@bywatersolutions.com)
184 - [Kyle Hall](mailto:kyle@bywatersolutions.com)
185 - [Marcel de Rooy](mailto:m.de.rooy@rijksmuseum.nl)
186 - [Martin Renvoize](mailto:martin.renvoize@ptfs-europe.com)
187 - [Alex Sassmannshausen](mailto:alex.sassmannshausen@ptfs-europe.com)
188 - [Nick Clemens](mailto:nick@bywatersolutions.com)
189 - [Julian Maurice](mailto:julian.maurice@biblibre.com)
190 - [Tomás Cohen Arazi](mailto:tomascohen@gmail.com)
192 - [Marc Véron](mailto:veron@veron.ch)
193 - [Claire Gravely](mailto:claire_gravely@hotmail.com)
194 - [Josef Moravec](mailto:josef.moravec@gmail.com)
195 - [Amit Gupta](mailto:amitddng135@gmail.com)
196 - Packaging Manager: [Mirko Tietgen](mailto:mirko@abunchofthings.net)
197 - Documentation Team:
198 - [Katrin Fischer](mailto:Katrin.Fischer@bsz-bw.de)
199 - [Chris Cormack](mailto:chrisc@catalyst.net.nz)
200 - Translation Manager: [Bernardo Gonzalez Kriegel](mailto:bgkriegel@gmail.com)
202 - [Thomas Dukleth](mailto:kohadevel@agogme.com)
203 - Release Maintainers:
204 - 17.05 -- [Fridolin Somers](mailto:fridolin.somers@biblibre.com)
205 - 16.11 -- [Katrin Fischer](mailto:Katrin.Fischer@bsz-bw.de)
206 - 16.05 -- [Mason James](mtj@kohaaloha.com)
210 We thank the following libraries who are known to have sponsored
211 new features in Koha 17.05.03:
215 We thank the following individuals who contributed patches to Koha 17.05.03.
220 - Tomás Cohen Arazi (2)
222 - Jonathan Druart (10)
226 - Fridolin Somers (1)
230 We thank the following libraries, companies, and other institutions who contributed
231 patches to Koha 17.05.03
235 - bugs.koha-community.org (10)
236 - ByWater-Solutions (2)
238 - ilsleypubliclibrary.org (1)
239 - informaticsglobal.com (20)
243 - Theke Solutions (2)
246 We also especially thank the following individuals who tested patches
251 - Axelle Clarisse (1)
255 - Frédéric Demians (1)
256 - Fridolin Somers (54)
258 - Jonathan Druart (55)
266 - Tomas Cohen Arazi (8)
268 - Marcel de Rooy (27)
270 We regret any omissions. If a contributor has been inadvertently missed,
271 please send a patch against these release notes to
272 koha-patches@lists.koha-community.org.
274 ## Revision control notes
276 The Koha project uses Git for version control. The current development
277 version of Koha can be retrieved by checking out the master branch of:
279 - [Koha Git Repository](git://git.koha-community.org/koha.git)
281 The branch for this version of Koha and future bugfixes in this release
283 The last Koha release was 17.05.02, which was released on Jully 27, 2017.
285 ## Bugs and feature requests
287 Bug reports and feature requests can be filed at the Koha bug
290 - [Koha Bugzilla](http://bugs.koha-community.org)
292 He rau ringa e oti ai.
293 (Many hands finish the work)
295 Autogenerated release notes updated last on 24 août 2017 07:08:25.