Warning
There are known security vulnerabilities in Open XDMoD versions ≤11.0.2. We strongly encourage upgrading immediately to the latest version of Open XDMoD, 11.0.3, which contains fixes for these vulnerabilities.
To upgrade version 9.0 to 11.0.3, you will first need to upgrade to version 9.5.0, then upgrade to version 10.0.3, then upgrade to version 10.5.1, then upgrade to version 11.0.3.
If you cannot upgrade immediately, you can follow the instructions below to manually patch your installation as a temporary workaround before upgrading later.
Workaround instructions
- First, make sure you are on the correct web page for your version of Open XDMoD. The web page you are on now is for version 9.0. Other versions' pages are linked below:
- Download the patch file for your version:
- Copy the patch file to your Open XDMoD web server.
-
Make sure you have the
patchcommand installed; it can be installed withdnf install patch. -
Apply the patch by running the command below, replacing
[PATH_TO_XDMOD_SHARE_DIR]with the path to the share directory (/usr/share/xdmodfor RPM-based installs,/opt/xdmod/shareor another location for source code installs) and replacing[PATH_TO_PATCH_FILE]with the path to the patch file.# patch -p1 -d [PATH_TO_XDMOD_SHARE_DIR] < [PATH_TO_PATCH_FILE]
NOTE: A previous version of this web page instructed you to manually patch the fileclasses/Realm/GroupBy.php. If you did so, you will see the following prompt:patching file classes/Realm/GroupBy.php
Make sure to choose
Reversed (or previously applied) patch detected! Assume -R? [n]n, and when it asks "Apply anyway? [n]", choosenagain. - Upgrade to the latest version of Open XDMoD as soon as you can.
About → License Notices
Open XDMoD is bundled with several other open source software libraries.
Non-Commercial Licenses
The following libraries are licensed using non-commercial licenses. These software products are not free for commercial use.
- Highcharts, which is available under the Creative Commons Attribution-NonCommercial 3.0 license.
For more information regarding Highcharts licensing, please refer to their Non Commercial Licensing FAQ.
Open Source Licenses
The following libraries are licensed using OSI-approved licenses except where denoted. These software products are free for commercial use.
- Ext JS 3.4.1.1, which is available under the GPL 3.0.
- Zend Framework 1.12.0, which is available under the New BSD License.
- jQuery, which is available under the MIT License.
- Jasper Reports, which is available under the LGPL 3.0.
- Commons BeanUtils, which is available under the Apache License Version 2.0.
- Commons Collections, which is available under the Apache License Version 2.0.
- Commons Digester, which is available under the Apache License Version 2.0.
- Commons Logging, which is available under the Apache License Version 2.0.
- iText, which is available under the Affero General Public License.
- Apache POI, which is available under the Apache License Version 2.0.
- Xalan-Java, which is available under the Apache License Version 2.0.
- RSVP.js, which is available under the MIT License.
- Silex, which is available under the MIT License.
- SimpleSAMLphp, which is available under the LGPL 2.1.
- PHP OpenID, which is available under the Apache License Version 2.0.
- PHP SQL Parser, which is available under the New BSD License.
- JSON Schema for PHP, which is available under the MIT License.
- Symfony Process Component, which is available under the MIT License.
- *Farm-Fresh Web Icons, which is available under the Creative Commons Attribution 3.0 License.
- Ext.ux.Printer, which is available under the MIT License.
- Ext.ux.MessageWindow, which is available under the LGPL 3.0.
- PasswordStrengthMeter.js, which is available under the MIT License.
- number-functions.js, which is available under the LGPL 2.1.
- console-polyfill, which is available under the MIT License.
- reCAPTCHA PHP Library, which is available under the MIT License.
- jquery-base64, which is available under the MIT License.
- *Ext.ux.form.GroupComboBox, which is available under a “BSD” license (it is not clear which BSD license is being referred to).
- composer/installers, which is available under the MIT License.
- EmailValidator, which is available under the MIT License.
- PDOOCI, which is available under the GPL 2.0.
- async, which is available under the MIT License.
- bignumber.js, which is available under the MIT License.
- bson, which is available under the Apache License Version 2.0.
- *cloneextend, which is available for any use.
- color-convert, which is available under the MIT License.
- color-name, which is available under the MIT License.
- color-string, which is available under the MIT License.
- color, which is available under the MIT License.
- colornames, which is available under the MIT License.
- colors, which is available under the MIT License.
- colorspace, which is available under the MIT License.
- core-util-is, which is available under the MIT License.
- diagnostics, which is available under the MIT License.
- enabled, which is available under the MIT License.
- env-variable, which is available under the MIT License.
- fast-safe-stringify, which is available under the MIT License.
- fecha, which is available under the MIT License.
- inherits, which is available under the ISC License.
- ini, which is available under the MIT License.
- is-arrayish, which is available under the MIT License.
- is-stream, which is available under the MIT License.
- isarray, which is available under the MIT License.
- kuler, which is available under the MIT License.
- lodash, which is available under the MIT License.
- logform, which is available under the MIT License.
- memory-pager, which is available under the MIT License.
- mongodb-core, which is available under the Apache License Version 2.0.
- mongodb, which is available under the Apache License Version 2.0.
- ms, which is available under the MIT License.
- mysql, which is available under the MIT License.
- one-time, which is available under the MIT License.
- process-nextick-args, which is available under the MIT License.
- readable-stream, which is available under the MIT License.
- require-all, which is available under the MIT License.
- require_optional, which is available under the Apache License Version 2.0.
- resolve-from, which is available under the MIT License.
- safe-buffer, which is available under the MIT License.
- saslprep, which is available under the MIT License.
- semver, which is available under the ISC License.
- simple-swizzle, which is available under the MIT License.
- sparse-bitfield, which is available under the MIT License.
- stack-trace, which is available under the MIT License.
- string_decoder, which is available under the MIT License.
- text-hex, which is available under the MIT License.
- triple-beam, which is available under the MIT License.
- tv4, which is available under the MIT License.
- util-deprecate, which is available under the MIT License.
- winston-transport, which is available under the MIT License.
- winston, which is available under the MIT License.
* = Not available under an OSI-approved license.
