Patches and updates
Portal for ArcGIS 10.8.1 Enterprise Sites Patch 2
Summary
Note: The Portal for ArcGIS 10.8.1 Enterprise Sites Patch 2 is obsolete and has been replaced by the Portal for ArcGIS Enterprise Sites Security Patch. The patch has been superseded by the Portal for ArcGIS Enterprise Sites Security Patch because the defects resolved in the Portal for ArcGIS 10.8.1 Enterprise Sites Patch 2 are also resolved in the Portal for ArcGIS 10.8.1 Enterprise Sites Security Patch. Please refer to the Issues Addressed section of the Portal for ArcGIS Enterprise Sites Security Patch page for details..
Description
EsriĀ® announces the Portal for ArcGIS 10.8.1 Enterprise Sites Patch 2. This patch addresses a cross-site scripting security issue in ArcGIS Enterprise Sites on ArcGIS Enterprise 10.8.1. The patch also resolves a functional issue. The patch is recommended for all users of ArcGIS Enterprise 10.8.1. This patch deals specifically with the issues listed below under Issues Addressed with this patch.
This patch addresses a security issue and minor regression with ArcGIS Enterprise Sites.
Issues Addressed with this patch
- BUG-000135364 - XSS in ArcGIS Enterprise Sites (iframe card)
CVSS 3.0 Base Score - 5.4- BUG-000133605 - With Portal for ArcGIS 10.8 Enterprise Sites Patch 1 is installed, downloading a spreadsheet using level 1 viewer and anonymously fails.
- BUG-000133088 - XSS in ArcGIS Enterprise Sites
CVSS 3.0 Base Score - 6.8
- BUG-000133039 - Creating a web map from datasets, in ArcGIS Enterprise Sites, fails with a 404 error.
- BUG-000125077 - Layers accessed through categories in ArcGIS Enterprise Sites do not honor the symbology changes.
Installing this patch on Windows
Installation Steps:
This patch should be installed on all Portal for ArcGIS installations related to the Portal for ArcGIS site.
The ArcGIS product listed in the table must be installed on your system before you can install a patch. Each patch setup is specific to the ArcGIS product in the list. To determine which products are installed on your system, please see the How to identify which ArcGIS products are installed section. Esri recommends that you install the patch for each product that is on your system.
- Download the appropriate file to a location other than your ArcGIS installation location.
ArcGIS 10.8.1 Checksum (Md5) Portal for ArcGIS Please see Portal for ArcGIS Enterprise Sites Security Patch - Make sure you have write access to your ArcGIS installation location.
- Double-click ArcGIS-1081-PFA-ES2-Patch.msp to start the setup process.
NOTE: If double clicking on the MSP file does not start the setup installation, you can start the setup installation manually by using the following command:
msiexec.exe /p [location of Patch]\ArcGIS-1081-PFA-ES2-Patch.msp
Installing this patch on Linux
Installation Steps:
Complete the following install steps as the ArcGIS Install owner. The Install owner is the owner of the arcgis folder. This patch should be installed on all Portal for ArcGIS installations related to the Portal for ArcGIS site.
The ArcGIS product listed in the table must be installed on your system before you can install a patch. Each patch setup is specific to the ArcGIS product in the list. To determine which products are installed on your system, please see the How to identify which ArcGIS products are installed section. Esri recommends that you install the patch for each product that is on your system.
- Download the appropriate file to a location other than your ArcGIS installation location.
ArcGIS 10.8.1 Checksum (Md5) Portal for ArcGIS Please see Portal for ArcGIS Enterprise Sites Security Patch - Make sure you have write access to your ArcGIS installation location, and that no one is using ArcGIS.
- Extract the specified tar file by typing:
% tar -xvf ArcGIS-1081-PFA-ES2-Patch-linux.tar
Start the installation by typing:
% ./applypatch
This will start the dialog for the menu-driven installation procedure. Default selections are noted in parentheses ( ). To quit the installation procedure, type 'q' at any time.
Uninstalling this patch on Windows
Uninstalling this patch on Linux
./removepatch.sh
The removepatch.sh script allows you to uninstall previously installed patches or hot fixes. Use the -s status flag to get the list of installed patches or hot fixes ordered by date. Use the -q flag to remove patches or hot fixes in reverse chronological order by date they were installed. Type removepatch -h for usage help.
Patch Updates
Check the Esri Support Downloads page periodically for the availability of additional patches. New information about this patch will be posted here.
How to identify which ArcGIS products are installed
To determine which ArcGIS products are installed, choose the appropriate version of the PatchFinder utility for your environment and run it from your local machine. PatchFinder will list all products, hot fixes, and patches installed on your local machine.
Getting Help
Domestic sites, please contact Esri Technical Support at 1-888-377-4575, if you have any difficulty installing this patch. International sites, please contact your local Esri software distributor.
Download ID:7851
Get help from ArcGIS experts
Download the Esri Support App