ArcGIS GeoEvent Server 11.3 Patch 1 (Windows | Linux)

ArcGIS GeoEvent Server 11.3 Patch 1 is a general security and maintenance patch that addresses multiple security vulnerabilities, and a specific issue related to the Receive RSS connector. Esri recommends that all customers using ArcGIS GeoEvent Server 11.3 apply this patch. 

• It is recommended to create a backup of your GeoEvent Server configuration prior to installation of the patch.
• ArcGIS GeoEvent Server 11.3 must be installed before you can install this patch.
• You must clear the browser cache after this patch is installed to properly load the updated GeoEvent Manager User Interface.
• ArcGIS GeoEvent Server Patches cannot be uninstalled. To roll back a patch requires a fresh install of GeoEvent Server.

• BUG-000173375 - The Receive RSS input connector does not process data.
• BUG-000174297 - Prevent a directory traversal malicious attack in GeoEvent Manager.
• BUG-000174652 - Filter potentially malicious JavaScript characters in GeoEvent Manager.
• BUG-000174653 - Prevent unsanitized XSS strings as malicious input in GeoEvent Manager.
• BUG-000174655 - Prevent potentially malicious cross-site scripting in GeoEvent Manager.

Note: Any changes made to the configuration or property files in GeoEvent/etc or GeoEvent/gateway/etc will need to be reapplied to the new files after the patch is installed. The patch will overwrite the files in these locations.

Step 1: Login with an Administrator Windows account.

Step 2: Download the patch to a location other than your ArcGIS installation location.

            Patch File: GeoEvent-11.3-Patch1.msp

            Checksum (SHA256): 9229020b314a3398ffcf403f1f045b23a2feed9ecf41b40aed2c74a5167700d9           

Step 3: Double-click GeoEvent-11.3-Patch1.msp to start the install.

Note: If double clicking on the MSP file does not start the setup installation, you can start the setup installation manually by using the following command: msiexec.exe /p <location of patch>\GeoEvent-11.3-Patch1.msp

Step 4: Open the GeoEvent Manager to ensure your inputs, outputs, and GeoEvent Services have been started. If they are not, restart them in the GeoEvent Manager.

Note: Any changes made to the configuration or property files in GeoEvent/etc or GeoEvent/gateway/etc will need to be reapplied to the new files after the patch is installed. The patch will overwrite the files in these locations.

Step 1: Log in as the user that installed ArcGIS Server. 

      Note: For the Amazon AMI this is the user arcgis.

Step 2: Download the patch to a location other than your ArcGIS installation location.

                Patch File: GeoEvent-11.3-Patch1.tar.gz

                Checksum (SHA256): 4f01037584487285a69906d8e1415a7e670f45c49d33a9f598717812e851031d

Step 3: Extract the package:     % tar -xzvf GeoEvent-11.3-Patch1.tar.gz

Step 4: Stop the GeoEvent daemon services.

Step 5: Start the installation and wait for it to complete:     % ./GeoEvent/Patch.sh

Step 6: Delete the contents of the GeoEvent Server data folder.     % rm -rf /GeoEvent/data/*

Step 7: After the setup is complete, restart the GeoEvent daemon services.

Step 8: Open the GeoEvent Manager to ensure your inputs, outputs, and GeoEvent Services have been started. If they have not started, restart them in the GeoEvent Manager.

To determine which ArcGIS products are installed, choose the appropriate version of the PatchFinder utility for your environment and run it from your local machine. PatchFinder will list products, hot fixes, and patches installed on your local machine.

• PatchFinder for Windows
• PatchFinder for Linux/Unix

To determine which version of ArcGIS GeoEvent Server is installed append /version.txt to the GeoEvent Manager URL. For example:

• https://localhost:6143/geoevent/manager/version.txt