Content Comparison

Bahmni Standard v1.0.1 are security patch releases incorporating the latest OpenMRS security fixes, ensuring enhanced system protection and stability.

Key Enhancements in Bahmni Standard v1.0.1

1. Security Enhancements

• Integration of OpenMRS security patches to mitigate critical vulnerabilities, including:

  • Broken Access Control risks

  • Phishing Attack Mitigations

  • Stored XSS (Cross-Site Scripting) Protections

• Alignment with OpenMRS security recommendations to ensure Bahmni adheres to the latest security standards.

2. Upgraded OpenMRS Core & Modules

Bahmni now runs on:

• OpenMRS Core: v2.5.14

• Updated Security-Patched Modules:

  • Legacy UI OMOD: 1.21.0

  • ID Gen OMOD: 4.14.0

  • Address Hierarchy OMOD: 2.19.0

3. Stability & Performance Improvements

• Enhancements to system performance and reliability

• Seamless upgrade process with minimal downtime

4. Updated Docker Images for Deployment

New Docker images have been released to facilitate seamless and efficient deployment of Bahmni with the latest security updates and enhancements. The bahmni/openmrs Docker image has been updated and released with the 1.1.2 tag for Bahmni Standard. This update incorporates critical security patches from OpenMRS, addressing vulnerabilities identified during recent penetration testing.

Individual Artifact Versions

Bahmni Standard v1.0.1 retains the same artifact versions as v1.0.0, except for the updated OpenMRS Docker image.

The versions of bundled OpenMRS modules can be referenced from OpenMRS → Administration → Manage Modules.

Getting Started for New Implementers

For new installations, follow these steps:

# Clone the bahmni-docker repository
git clone https://github.com/Bahmni/bahmni-docker.git

cd bahmni-docker/bahmni-standard

# Checkout the 1.0.1-standard tag
git checkout 1.0.1-standard

# Using docker compose
docker compose --profile bahmni-standard up -d

# Or use the bash script
./run-bahmni.sh .env

For detailed setup instructions, refer to the Bahmni Docker Wiki.

Migration for Existing Implementers

1. Prerequisites

Before upgrading, ensure you have the following installed:

1. Stable version of Git

2. Latest stable versions of Docker & Docker Compose (based on your OS)

2. Backup Your Data

Before proceeding, ensure you take a complete backup of your implementation data to prevent any potential data loss.

3. Update the OpenMRS Image Tag

For Bahmni Standard Implementations:

• Pull the v11.0.1-standard tag from the bahmni-docker repository:

  Code Block
  git pull --tags

• Switch to the v11.0.1-standard tag:

  Code Block
  git checkout v11.0.1-standard

• Alternatively, update the .env file in your implementation directory:

  Code Block
  OPENMRS_IMAGE_TAG=1.1.2

For reference, review the relevant PR in the Bahmni Docker repository.

4. Pull the Latest Docker Images

Run the following command to fetch the updated Docker images:

docker compose --env-file .env pull

5. Restart Services

Restart the OpenMRS service to apply the updates:

docker compose --env-file .env up -d openmrs

Upgrade Recommendations

We strongly encourage all Bahmni Standard v1.0.0 users to upgrade to these patched versions at the earliest convenience to benefit from the latest security and stability improvements.

For further details, refer to:

• OpenMRS release notes

• OpenMRS Security Advisory, January 2025

Acknowledgments

We extend our gratitude to the OpenMRS security team for their efforts in identifying and resolving security vulnerabilities, as well as to the Bahmni community for their continued support and contributions.