Evergreen ILS

Open Source Library Software

Releases

OpenSRF 2.1.2 release

OpenSRF 2.1.2
As of November 18, 2012, the OpenSRF 2.1.2 release is available for download from the OpenSRF downloads page.

This release corrects a problem where OpenSRF clients were unable to access the shared configuration section of opensrf_core.xml, resulting in errors. The most commonly observed symptom of this problem was an inability to registering new Evergreen workstations in the staff client after installing the OpenSRF 2.1.1 release.

The fastest means of updating your OpenSRF 2.1.1 release to 2.1.2 is to copy the version of src/perl/lib/OpenSRF/System.pm from the 2.1.2 release over the installed version of the same Perl module. For example, on Debian Squeeze:

  1. cp src/perl/lib/OpenSRF/System.pm /usr/local/share/perl/5.10.1/OpenSRF/.
  2. Then restart all OpenSRF Perl services

Many thanks to Jason Stephenson for diagnosing the problem and providing the fix in such a timely fashion.

Evergreen 2.3.0 Released

Hi Everyone,
It is with great pleasure that I announce the official release of Evergreen 2.3.0.
Links to the source code, staff client, and documentation can be found at http://evergreen-ils.org/downloads.php
Some highlights from this release:
  • A significant staff client upgrade to support newer versions of XULRunner.
  • Kid’s Catalog
  • A whole slew of TPAC features and fixes (CSS templates, bookbag interface enhancements, locale picker, and much more).
  • A number of acquisitions features, including EDI invoicing, enriched EDI orders, and numerous enhancements to the invoicing process.
  •  New faster holds pull list
  • And more! — the release was composed of 538 commits across 26 different authors.
Some aspects of this release cycle make it unique and are, I think, important signs of continuing maturity of the software and the community.
  • This is the first release using the new time-based Sept / March release schedule.
  • This is the first release to benefit from electing a release manager (yours truly) in the early stages of the release.
  • During this release cycle, we introduced development-time release notes, helping us avoid the last-minute rush to compile release notes.
Special thanks to everyone who had a hand in coding, documenting, testing, poking, prodding, sponsoring development, providing candy / soft drinks, and generally helping in keeping Evergreen moving forward.  We couldn’t do it without you.

SECURITY RELEASES – Evergreen 2.2.2 and 2.1.3

Hi everyone. As the 2.2 series release maintainer, and on behalf of Dan Scott in charge of the 2.1 series, I hereby announce Evergreen 2.2.2 and 2.1.3, which contain security fixes.

You can download these now!

Both of these releases also contain bugfixes not related to security. 2.2.2 has brief release notes here.

The technical changelogs are here for 2.2.2 and 2.1.3.

If you follow the 2.3 series, expect Evergreen 2.3.0 beta2 soon.

THESE RELEASES CONTAINS SECURITY UPDATES, so you will want to upgrade as soon as possible.

The cstore service is vulnerable to remotely triggered segmentation faults. More information about the security updates can be found in the ChangeLog.

If you don’t wish to upgrade outright to the latest version, sites running any 2.1 or 2.2 release today can get the benefit of the security updates by following these steps:

  1. Download the 2.1.3, or 2.2.2 release tarball; whichever belongs to the release series you’re currently running.
  2. Untar the tarball
  3. In the source directory, run ./configure --prefix=/openils --sysconf=/openils/conf && make to build the libraries
  4. Install the chrpath tool (aptitude install chrpath on Debian / Ubuntu systems)
  5. Run chrpath -d Open-ILS/src/c-apps/.libs/oils_cstore.so to enable the library to link to the appropriate location.
  6. Copy your existing oils_cstore.so library to a safe location; for example, cp /openils/lib/oils_cstore.so /openils/oils_cstore.so.20120822
  7. Copy your new oils_cstore.so library into place: cp Open-ILS/src/c-apps/.libs/oils_cstore.so /openils/lib/
  8. VERY IMPORTANT: Repeat the preceding three steps substituting “pcrud” everywhere I said “cstore.” Repeat them again substituting “rstore” everywhere I said “cstore.”
  9. As the root user, run ldconfig to refresh your dynamic linking cache.
  10. Restart your OpenSRF C services: osrf_ctl.sh -a restart_c (NOTE: you may require the -l flag on that command, depending on your system).

* To slightly paraphrase Galen Charlton who once referred to similar instructions for a previous security update:

Note that /openils/lib/oils_cstore.so is normally a symbolic link to oils_cstore.so.2.0.0. When applying Dan’s fix procedure, make sure that the final result has all versions of the file name oils_cstore.so[.*] pointing to the same shared object.