Bahmni Lite 1.0.1 Patch Release Note

Bahmni Lite v1.0.1 security patch releases incorporates the latest OpenMRS security fixes, ensuring enhanced system protection and stability.

Key Enhancements in Bahmni Lite v1.0.1

1. Security Enhancements

Integration of OpenMRS security patches to mitigate critical vulnerabilities, including:
- Broken Access Control risks
- Phishing Attack Mitigations
- Stored XSS (Cross-Site Scripting) Protections
Alignment with OpenMRS security recommendations to ensure Bahmni adheres to the latest security standards.

2. Upgraded OpenMRS Core & Modules

Bahmni now runs on:

OpenMRS Core: v2.5.14
Updated Security-Patched Modules:
- Legacy UI OMOD: 1.21.0
- ID Gen OMOD: 4.14.0
- Address Hierarchy OMOD: 2.19.0

3. Stability & Performance Improvements

Enhancements to system performance and reliability
Seamless upgrade process with minimal downtime

4. Updated Docker Images for Deployment

New Docker images have been released to facilitate seamless and efficient deployment of Bahmni with the latest security updates and enhancements. The bahmni/openmrs Docker image has been updated and released with the 1.0.1 tag for Bahmni Lite. This update incorporates critical security patches from OpenMRS, addressing vulnerabilities identified during recent penetration testing.

Individual Artifact Versions

Bahmni Lite v1.0.1 retains the same artifact versions as v1.0.0, except for the updated OpenMRS Docker image.

The versions of bundled OpenMRS modules can be referenced from OpenMRS → Administration → Manage Modules.

Getting Started for New Implementers

For new installations, follow these steps:

# Clone the bahmni-docker repository
git clone https://github.com/Bahmni/bahmni-docker.git

cd bahmni-docker/bahmni-lite

# Checkout the 1.0.1-lite tag
git checkout 1.0.1-lite 
  
# Using docker compose
docker compose --profile bahmni-lite up -d

# Or use the bash script
./run-bahmni.sh .env

For detailed setup instructions, refer to the Bahmni Docker Wiki.

Migration for Existing Implementers

This upgrade does not impact patient data, but taking a backup before proceeding is strongly recommended.

1. Prerequisites

Before upgrading, ensure you have the following installed:

Stable version of Git
Latest stable versions of Docker & Docker Compose (based on your OS)

2. Backup Your Data

Before proceeding, ensure you take a complete backup of your implementation data to prevent any potential data loss.

3. Update the OpenMRS Image Tag

For existing Bahmni Lite Implementations:

Pull the 1.0.1-lite tag from the bahmni-docker repository:
git pull --tags
Pull the latest bahmni-docker repository and switch to the 1.0.1-lite tag:
git checkout 1.0.1-lite
Alternatively, update the .env file in your implementation directory:
OPENMRS_IMAGE_TAG=1.0.1

For reference, review the relevant PR in the Bahmni Docker repository.

4. Pull the Latest Docker Images

Run the following command to fetch the updated Docker images:

docker compose --env-file .env pull

5. Restart Services

Restart the OpenMRS service to apply the updates:

docker compose --env-file .env up -d openmrs

If your local setup uses the latest tag, follow Steps 4 and 5 to pull the latest image and update your services accordingly.

Upgrade Recommendations

We strongly encourage all Bahmni Lite v1.0.0 users to upgrade to these patched versions at the earliest convenience to benefit from the latest security and stability improvements.

For further details, refer to:

Acknowledgments

We extend our gratitude to the OpenMRS security team for their efforts in identifying and resolving security vulnerabilities, as well as to the Bahmni community for their continued support and contributions.

On this page

Bahmni Wiki