For convenience's sake, I've made a nice little one-liner for everyone to copy/paste into their FreePBX CLI:
cd /usr/src && wget download.fop2.com/fop2-$(/usr/local/fop2/fop2_server --version | cut -d " " -f 3)-centos-x86_64.tgz && tar -zxvf fop2-$(/usr/local/fop2/fop2_server --version | cut -d " " -f 3)-centos-x86_64.tgz && cd /usr/src/fop2 && make install
(something something don't copy/paste code you find on the internet, with great power comes great responsibility, results may vary, etc etc)
Also:
Just to make sure I'm understanding this correctly, you've patched the vulnerability in all versions of FOP2, and then we're supposed to re-install the version of FOP2 that we already have onto itself. Is that correct?
In my testing, the make install fails, with "Reactivation failed! (EXPIRED)", which is correct - our maintenance licenses are not up-to-date, and that's fine as far as we're concerned. However, this appears to prevent the re-installation from occurring - a file I deliberately broke in the web GUI was not overwritten with a new file from the installer after running my above script. Am I misinterpreting my test, or do we have to buy maintenance licenses for every one of our FOP2 installations in order to perform this patch?