Soft-pinning koha-common using salt.

As long as no one updates all packages this is good enough.
Alternatively we need to pin using apt:
http://askubuntu.com/questions/18654/how-to-prevent-updating-of-a-specific-package