- Koha - lists.katipo.co.nz

[Security advisory] For 'dev' installs (CVE-2014-6271)
by Tomas Cohen Arazi 27 Sep '14

27 Sep '14

A couple emails have been sent to the list on this regard (thanks Robin, Chris and Steven). It is important that you know that most Koha deployments are not exposed to this vulnerability (CVE-2014-6271 <http://www.csoonline.com/article/2687265/application-security/remote-exploi…>). ONLY 'dev' installs are vulnerable. In order to avoid this vulnerability, 'dev' installs should add the following to their Apache virtualhost definitions: RedirectMatch 403 \.sh$ If you don't know *where* to put this, mine looked like this (and yours should too): #### Options +FollowSymLinks # If you are overriding any system preferences, # list them in this variable so the preference editor # knows that they have been overridden. # SetEnv OVERRIDE_SYSPREF_NAMES "Pref1,Pref2,Pref3" RedirectMatch 403 \.sh$ ErrorDocument 400 /cgi-bin/koha/errors/400.pl ### Please contact any of us in private (I prefer IRC) if you have more doubts specific to your setup. ==== To sumarize: - Know that Koha is not vulnerable to this bug on most of its deployment forms: * Packages: SAFE * Source install (tar.gz/git/gitify): - standard: SAFE - single: SAFE - dev: UNSAFE - Make sure your operating system has the latest bash update installed. Just keep it updated, frecquently. - There's a solution for 'dev' installs, the one above (add the "RedirectMatch 403 \.sh$" line to your vhosts definition). Regards -- Tomás Cohen Arazi Prosecretaría de Informática Universidad Nacional de Córdoba ✆ +54 351 5353750 ext 13168 GPG: B76C 6E7C 2D80 551A C765 E225 0A27 2EA1 B2F3 C15F

3 2

Problem in printing purchase order in Hindi
by Arup Raychaudhury 27 Sep '14

27 Sep '14

We have added around 200 titles in Hindi to a Basket through Acquisition. However, I am unable to print the purchase order (pdf file)-title, author etc not at all appearing in the output. Output in CSV file is OK. -- Arup Raychaudhury Indian Statistical Institute 203 BT Road Kolkata 700108. INDIA

2 1

Shellshock
by Steven Nickerson 27 Sep '14

27 Sep '14

With the finding of the most recent "Shellshock" vulnerability with the BASH shell, I'm wondering If Koha uses the BASH shell in any way? I'm pretty sure it does not, but just wanted to make sure. I realize that the Linux system Koha is running on likely has the BASH shell that probably has the vulnerability, but I'm just trying to ascertain if a potential hacker could get to system through the Koha application. Thanks! Steve

4 3

Re: [Koha] Comment: Koha Community Code of Conduct
by glaws 26 Sep '14

26 Sep '14

Well, yes, that's my point really. By the simple definition given in the CoC every comment on the enumerated items is harassing. "Harassment includes...comments related to gender, gender identity, sexual orientation, disability, physical appearance, body size, race or religion." Greg On 09/26/2014 03:05 PM, Riley Childs wrote: > Overly broad? You can harass without knowing it, you are taking I in > the literal sense that every comment is harssing. > > Riley Childs > Senior > Charlotte United Christian Academy > Library Services Administrator > IT Services > (704) 497-2086 > rileychilds.net > @rowdychildren > ------------------------------------------------------------------------ > From: glaws <mailto:glawson@rhcl.org> > Sent: ‎9/‎26/‎2014 3:50 PM > To: koha(a)lists.katipo.co.nz <mailto:koha@lists.katipo.co.nz> > Subject: [Koha] Comment: Koha Community Code of Conduct > > I have some concerns about the Koha Community Code of Conduct posted here: > > http://koha-community.org/about/policy/code-of-conduct/ > <http://koha-community.org/about/policy/code-of-conduct/> > > My specific concern is the second bullet point: > > Harassment includes, but is not limited to: > > * ---snip--- > * Verbal, graphic or written comments related to gender, gender > identity, sexual orientation, disability, physical appearance, body > size, race or religion > > > which seems overly broad. > > Examples > > If, during a conference breaking for lunch, I say to a group of > attendees "I'm Buddhist, is there a vegetarian restaurant near here?", I > would seem to have violated this point (verbal...comment...religion). > > Or if I'm a presenter, and I make a comment for illustrative purposes, > like "Just as people come in all sizes, libraries also vary in size and > Koha is great for all of them", have I violated the code? > > Or if I'm with a group of attendees planning on going out somewhere, and > I say "I have <insert any health problem>, and I can't walk with you > that far", is that a violation? > > I would like to suggest that the wording for this particular point > include something to the effect that the references must be obviously > negative in nature or perhaps intended to give offense to to an average > person _based_on_some_reasonable_standard_. > > > -- > Greg Lawson > > _______________________________________________ > Koha mailing list http://koha-community.org > Koha(a)lists.katipo.co.nz > http://lists.katipo.co.nz/mailman/listinfo/koha -- Greg Lawson Rolling Hills Consolidated Library 1912 N. Belt Highway St. Joseph, MO 64506 816-232-5479 x2303

3 4

Improving Search Results
by Coehoorn, Joel 26 Sep '14

26 Sep '14

I support a relatively new Koha installation, and the search quality we've experienced has been exceptionally poor. What can I do to improve search quality? Here's an example I received today from a librarian: --------------------------------------- On 4/21/14 I cataloged *The Word of Promise from Jesus: Dramatic Passages from the Gospels*. Jim Caviezel was listed as an author since he wrote the foreword. It was given two barcodes since the book also contained a CD. The barcodes are 212580 for the book and 212581 for the CD. L____ had a request from Interlibrary loan for this title. We searched KOHA every way we could think to pull this title up and continued to get a message that "nothing was found". I went to World Cat and found the title with the indication that it was available at York College. In desperation, I checked the basic LC call number and found BT 306. I had L_____ go search the BT 306 section of the shelves and he found the book! Then after finding the book and having the barcode number, I tried to pull the book up by searching for the barcode number. Again, "nothing found". As a last resort, I went into the Reports area of KOHA and searched for the barcode number. Guess what! The Reports area found it. I clicked on the Biblio number and up came the record. Now the record was in there! Why wouldn't it come up when we searched for it? Another example. Dr. E____ asked me to order the 2014 Award winning books. I found the list and checked KOHA for each title to confirm that we didn't have a copy in the library. A couple of the books seemed familiar, but all I got was "not found". I prepared the requisition and ordered the titles. Well, the books came in last Friday. Tuesday I cataloged them. When I downloaded the cataloging from OCLC into KOHA, two of the titles didn't go in because they were duplicates!! I went back and tried to pull them up in KOHA and guess what! They came up. So this caused us to have 2 copies of these two titles. Fortunately it didn't cost more than $20 to get these titles, but KOHA needs to be working correctly so this doesn't happen again. --------------------------------------------------------------------- The point of this is that, from our librarians perspective, without a better search experience, Koha is "broken". Those are their words, not mine. Here's the thing: when I run a search in Koha, I do get back lots of results from our catalog that are highly relevant to the search terms. But these are exact title matches, and they come back with "Not found". How can I improve this? Joel Coehoorn Director of Information Technology York College, Nebraska 402.363.5603 *jcoehoorn(a)york.edu <jcoehoorn(a)york.edu>* The mission of York College is to transform lives through Christ-centered education and to equip students for lifelong service to God, family, and society

3 2

koha reports
by Monisa Aslam 26 Sep '14

26 Sep '14

datewise list of checkin booksdatewise list of checkout books can anybody help?????? Monisa Aslam

2 1

sql report for bibliographic records with more than one subject
by schnydszch 26 Sep '14

26 Sep '14

Hi all! Im trying to make a report that will have in one column all subjects of the bibliographic record separated by a 'semicolon', so it can be saved as csv file. I'm trying the following: SELECT ExtractValue(marcxml,'//datafield[@tag="245"]/subfield[@code="a"]') AS TITLE, ExtractValue(marcxml,'//datafield[@tag="245"]/subfield[@code="b"]') AS TITLE2, ExtractValue(marcxml,'//datafield[@tag="246"]/subfield[@code="a"]') AS TITLE3,ExtractValue(marcxml,'//datafield[@tag="245"]/subfield[@code="c"]') AS AUTHOR, ExtractValue(marcxml,'//datafield[@tag="581"]/subfield[@code="a"]') AS Source, ExtractValue(marcxml,'//datafield[@tag="590"]/subfield[@code="a"]') AS Date_Approved, ExtractValue(marcxml,'//datafield[@tag="653"]/subfield[@code="a"]') AS Subjects FROM biblioitems LEFT JOIN biblio on (biblioitems.biblionumber=biblio.biblionumber) WHERE biblioitems.itemtype='LAWS' ORDER BY biblio.title asc However, with this query it puts in one column all subjects separated by space. I'm trying out group_concat with separator, but still to no avail. Anybody in the group who had the same query? Thanks in advance and cheers! -- View this message in context: http://koha.1045719.n5.nabble.com/sql-report-for-bibliographic-records-with… Sent from the Koha-general mailing list archive at Nabble.com.

1 1

Re: [Koha] delete bibs
by Arslan Farooq 26 Sep '14

26 Sep '14

Hi, I just Googled and found this: http://lists.katipo.co.nz/public/koha/2012-March/032175.html It may help. Regards, Arslan On Fri, Sep 26, 2014 at 10:25 AM, Monisa Aslam <monisaaslam(a)hotmail.com> wrote: > i want to delete all bibs without item...................... is there any > way > > Monisa Aslam > > -- Electronic Resource Librarian SZABIST Islamabad www.szabist-isb.edu.pk arslan.farooq(a)szabist-isb.edu.pk +92 514 863 363-65

1 0

csv-marc
by Ramprasad S. Joshi 26 Sep '14

26 Sep '14

@Olawale ILESANMI: CSV to MARC should be easy. Can you post sample data records (100, say) please? Ramprasad Joshi CS-IS Dept BITS, Pilani - K K Birla Goa Campus Zuarinagar, GOA INDIA 403726 Phone +91 832 2580 121 Fax +91 832 2557033

2 1

Download a MARC file of a Saved Report
by Alyssa Enganio Gono 26 Sep '14

26 Sep '14

I have a saved report that shows the list of Books with no Barcodes. I want to download only a MARC file of those bibliographic record of the books with no barcodes.How will I do it? The only option I can download the report is in a form of csv file.e.g. comma separated text; tab separated text and open document spreadsheet. -- View this message in context: http://koha.1045719.n5.nabble.com/Download-a-MARC-file-of-a-Saved-Report-tp… Sent from the Koha-general mailing list archive at Nabble.com.

2 1