Evergreen ILS

Open Source Library Software

Announcements

Evergreen 3.4.0 and OpenSRF 3.2.0 released

The Evergreen community is proud to announce the release of Evergreen 3.4.0. Evergreen is highly-scalable software for libraries that helps library patrons find library materials and helps libraries manage, catalog, and circulate those materials, no matter how large or complex the libraries.

Evergreen 3.4.0 is a major release that includes the following new features of particular note:

  • Integrated carousels for the public catalog
  • Billings and payments can now be aged, allowing the link between a patron and their billings to be severed when a circulation is aged.
  • A new feature for generating print content via a server-side web service is now available that allows for centralized management of print templates.
  • The Booking module has been redesigned with most of its interfaces rewritten in Angular. This redesign adds
    • The ability to edit reservations in many screens
    • A new notes field for the reservations record
    • A calendar view in the Create Reservations Interface
  • A number of improvements in cataloging, including
    • A new ‘Cancel Edit’ button in the record merge interface
    • The ability to export records from a staff catalog record basket
    • Additional options for controlling the overlay of items during MARC Batch Import/Export
    • The Physical Characteristics Wizard now displays both code and label for coded values
  • A number of circulation improvements, including
    • Enhancements to the Mark Item functions
    • A new Action Trigger notification is available for when a patron exceeds their fines and fees limit
    • A new permission to control whether a staff user can create pre-cats
    • Improvements to the Billing Details screen
  • Various improvements to the experimental Angular staff catalog, including
    • A new record holds tab
    • Support for call number browsing
    • Support for storing a list of recent searches
    • Support for named catalog search templates, allowing staff to create predefined searches
    • A new flat text MARC editor
  • A variety of staff client interfaces have been rewritten in Angular, including
    • The Organizational Units and Org Unit Types administration pages
    • The Permission Group administration page
    • The Standing Penalties administration page
    • A number of Local Administration pages
  • A number of improvements have been made to Angular grids in the staff interface, including
    • support for filtering grid contents per-column
    • making the grid header for long/tall grids sticky
  • It is now possible to configure LDAP authentication to allow a user’s institutional/single-sign-on username to be different from their Evergreen username.
  • A new mechanism for defining configurable APIs for patron authentication, allowing external services to more flexibly and securely use Evergreen to authenticate users.

The release is available on the Evergreen downloads page. For more information on what’s included in Evergreen 3.4.0, please consult the release notes or the tabular release notes summary.

Evergreen 3.4.0 requires PostgreSQL 9.6 or later and OpenSRF 3.2.0 or later.

The Evergreen community is also pleased to announce the release of OpenSRF 3.2.0, which adds support for Debian 10 Buster and removes support for the deprecated Apache WebSockets backend. For more information on the OpenSRF release, please consult its release notes.

Evergreen 3.4.0 and OpenSRF 3.2.0 include contributions from at least 32 individuals and 16 institutions.

Security Releases: Evergreen 3.1.15, 3.2.9, 3.3.4, and 3.4-beta2

On behalf of the Evergreen contributors, we are pleased to announce the release of Evergreen 3.1.15, 3.2.9, 3.3.4, and 3.4-beta2.

The new releases can be downloaded from:

http://evergreen-ils.org/egdownloads/

THESE RELEASES CONTAIN SECURITY UPDATES.

It is recommended that all Evergreen sites upgrade to one of the new releases as soon as possible.

These releases fix two bugs related to cross-site scripting (XSS) vulnerabilities in the public catalog.

Bug 1559239: Mitigates a potential risk of having a web page location changed when opening a link in a new tab. Evergreen administrators should review whether the following templates have been customized or overridden. If so, either the template should be replaced with the stock version or the rel="noopener" attribute added to all anchor (<a/>) tags with a target="_blank" attribute.

  • Open-ILS/src/templates/opac/parts/record/summary.tt2
  • Open-ILS/src/templates/opac/parts/result/table.tt2

Bug 1822630: Resolves a problem with not properly sanitizing user input. When upgrading, Evergreen administrators should review whether any of the following templates have been customized or overridden. If so, either the template should be replaced with the stock version or the XSS fix (which entails adding the | html filter in several places) applied to the customized version.

  • Open-ILS/src/templates/opac/browse.tt2
  • Open-ILS/src/templates/opac/parts/ebook_api/base_js.tt2
  • Open-ILS/src/templates/opac/parts/header.tt2
  • Open-ILS/src/templates/opac/parts/place_hold.tt2
  • Open-ILS/src/templates/opac/parts/place_hold_result.tt2
  • Open-ILS/src/templates/opac/parts/result/adv_filter.tt2

All of these new releases also contain bugfixes that not related to the security issues. For more information on the changes in these releases, please consult their release notes:

 

Evergreen 3.2.4 and 3.1.10 released

The Evergreen Community is proud to announce two new bug fix releases: Evergreen 3.2.4 and Evergreen 3.1.10. Both releases contain bug fixes in cataloging, reports, and system administration. 3.2.4 also includes improvements to accessibility, acquisitions, circulation, search, and the Angular client. You can download these new releases at the Evergreen Downloads Page.

3.2.4 contains the following bug fixes improving on Evergreen 3.2.3:

Accessibility

  • Adds appropriate alt text to the Evergreen splash page (Bug #1802594)
  • The public catalog search box now only autofocuses when searching is the main purpose of the page (Bug #1796225)

Acquisitions

  • Fixes an issue that prevented purchase orders to not open in a new tab (Bug #1813290)

Circulation

  • The Billing History grids now save their configuration in the database (Bug #1806709)

Cataloging

  • Catalogers can now set the Bib Source in the Z39.50 Overlay and Import interfaces (Bug #1727345)
  • Fixes an issue where publishers display in the publication date column in copy buckets (Bug #1812698)
  • Electronic reources no longer display a call number called URI in the Volume Editor (Bug #1752665)
  • Spine/pocket label templates can now include circulation library and owning library (Bug #1726568)

Reports

  • Fixes an issue where external documentation links can open in the reports module (Bug #1784893)
  • Fixes an issue where publishers display as a publication date in reports (Bug #1812698)

Search

  • Staff users can now set their prefered default Advanced Search pane (Bug #1799963)
  • The public catalog search box now only autofocuses when searching is the main purpose of the page (Bug #1796225)

System administration

  • The DELETE_COPY_ALERT permission no longer needs to be granted on the consortium level (Bug #1783421)

Angular client

  • The angular client now uses Angular 7 (Bug #1801984)
  • The angular client grid actions can now be disabled depending on the criteria of which rows are selected (Bug #1808268)
  • Angular client pages now display their own titles in the browser tab, rather than AngEG (Bug #1813647)

3.1.10 contains the following bug fixes improving on Evergreen 3.1.9:

Cataloging

  • Catalogers can now set the Bib Source in the Z39.50 Overlay and Import interfaces (Bug #1727345)
  • Fixes an issue where publishers display in the publication date column in copy buckets (Bug #1812698)
  • Electronic reources no longer display a call number called URI in the Volume Editor (Bug #1752665)
  • Spine/pocket label templates can now include circulation library and owning library (Bug #1726568)

Reports

  • Fixes an issue where external documentation links can open in the reports module (Bug #1784893)
  • Fixes an issue where publishers display as a publication date in reports (Bug #1812698)

System administration

  • The DELETE_COPY_ALERT permission no longer needs to be granted on the consortium level (Bug #1783421)