Patches and updates

ArcGIS Notebook Server Security Patch

Published: May 25, 2021

Summary

This security patch addresses a denial-of-service attack. Esri recommends that all customers using ArcGIS Notebook Server 10.9.1, 10.8.1 and 10.7.1 apply this patch.

Description

Esri® announces the ArcGIS Notebook Server Security Patch. Esri recommends that all customers using ArcGIS Notebook Server 10.9.1, 10.8.1 and 10.7.1 apply this patch. This patch deals specifically with the issues listed below under Issues Addressed with this patch.

ArcGIS Notebook Server Security Patch for Windows cannot be uninstalled, the usual Uninstall in the Windows Control Panel is disabled.

 

 

Issues Addressed with this patch

 

  • BUG-000139408 - There is a denial-of-service security vulnerability in ArcGIS Notebook Server.

 

Installing this patch on Windows

 

Installation Steps:

 

This patch should be installed on all ArcGIS Notebook Server installations related to the ArcGIS Notebook Server site.

The ArcGIS product listed in the table must be installed on your system before you can install a patch. Each patch setup is specific to the ArcGIS product in the list. To determine which products are installed on your system, please see the How to identify which ArcGIS products are installed section. Esri recommends that you install the patch for each product that is on your system.

  1. Download the appropriate file to a location other than your ArcGIS installation location.

    ArcGIS 10.9.1  
       
        ArcGIS Notebook Server ArcGIS-1091-NBS-S-Patch.msp
         Checksum
         (SHA256)    		 C3C9F6012F13280933764F43B521248B2D8FD449D1A2B6984CB39D43A744D7FD
       
    ArcGIS 10.8.1  
       
        ArcGIS Notebook Server ArcGIS-1081-NBS-S-Patch.msp
         Checksum
         (SHA256)    		 04BB545BEFAC8ADC90E8799F64ABB5B10EFADADFF3464AEA4557BCA03D5E5F19
       
    ArcGIS 10.7.1  
       
        ArcGIS Notebook Server ArcGIS-1071-NBS-S-Patch.msp
         Checksum
         (SHA256)    		 08FCEBA2E5EF69F6CC68C508BC52B842A9BDC4FFD544A56EB27CDACE92062E51
       

  2. Make sure you have write access to your ArcGIS installation location.
  3.  Double-click ArcGIS-<Version>-NBS-S-Patch.msp to start the setup process.
    NOTE: If double clicking on the MSP file does not start the setup installation, you can start the setup installation manually by using the following command:

    msiexec.exe /p [location of Patch]\ArcGIS-<Version>-NBS-S-Patch.msp

 

Installing this patch on Linux

 

Installation Steps:

 

Complete the following install steps as the ArcGIS Install owner. The Install owner is the owner of the arcgis folder. This patch should be installed on all ArcGIS Notebook Server installations related to the ArcGIS Notebook Server site.

The ArcGIS product listed in the table must be installed on your system before you can install a patch. Each patch setup is specific to the ArcGIS product in the list. To determine which products are installed on your system, please see the How to identify which ArcGIS products are installed section. Esri recommends that you install the patch for each product that is on your system.

  1. Download the appropriate file to a location other than your ArcGIS installation location.


    ArcGIS 10.9.1  
       
        ArcGIS Notebook Server ArcGIS-1091-NBS-S-Patch-linux.tar
         Checksum
         (SHA256)    		 4B26633BDA7DA7A88F55FFB8AEFB355411837AAC05A077E1177671E3FC883529
       
    ArcGIS 10.8.1  
       
        ArcGIS Notebook Server ArcGIS-1081-NBS-S-Patch-linux.tar
         Checksum
         (SHA256)    		 9E068E14C72A01F2C461D434770EA7AC6868766A6F5605EF3524889A7FE653C7
       
    ArcGIS 10.7.1  
       
        ArcGIS Notebook Server ArcGIS-1071-NBS-S-Patch-linux.tar
         Checksum
         (SHA256)    		 AC5564A9B9369A052FEA253DF6C82100E94260BFE0D8040C3932967FFF592E2D
       

  2. Make sure you have write access to your ArcGIS installation location, and that no one is using ArcGIS. 
  3. Extract the specified tar file by typing:

    % tar -xvf ArcGIS-<Version>-NBS-S-Patch-linux.tar
     
  4. Start the installation by typing:

    % ./applypatch

    This will start the dialog for the menu-driven installation procedure. Default selections are noted in parentheses ( ). To quit the installation procedure, type 'q' at any time.

Uninstalling this patch on Windows

 

ArcGIS Notebook Server Security Patch for Windows cannot be uninstalled, the usual Uninstall in the Windows Control Panel is disabled.

 

Uninstalling this patch on Linux

 

ArcGIS Notebook Server Security Patch for Linux should not be uninstalled. The uninstall is not disabled, but it is recommended that you completely uninstall the product and then re-install if it becomes necessary.

 

Patch Updates

Check the Patches and Service Packs page periodically for the availability of additional patches. New information about this patch will be posted here.

 

How to identify which ArcGIS products are installed

To determine which ArcGIS products are installed, choose the appropriate version of the PatchFinder utility for your environment and run it from your local machine. PatchFinder will list all products, hot fixes, and patches installed on your local machine.

Getting Help

Domestic sites, please contact Esri Technical Support at 1-888-377-4575, if you have any difficulty installing this patch. International sites, please contact your local Esri software distributor.


Download ID:7901

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options