ArcGIS Data Store Log4j Patch

• BUG-000145346 - Update log4j to address security vulnerabilities.
  
  Please see ArcGIS Enterprise Log4j Security Patches Available for further details.

• BUG-000125944 - The restoredatastore utility fails when the max connections property is changed between backups with 'pitr' enabled.
• BUG-000117892 - ArcGIS Data Store has a remote code execution vulnerability in the tile cache data store.
• BUG-000116403 - On Linux environments, the Spatiotemporal Data Store is not honoring the rolling-index strategy for shrinking indices. Indices are always shrunk on a daily basis regardless of their rolling-strategy.
• BUG-000115617 - Spatiotemporal Data Store Retention Policies are not honored on Linux environments.

Installation Steps:

This patch should be installed on all ArcGIS Data Store installations related to the ArcGIS Data Store site.

The ArcGIS product listed in the table must be installed on your system before you can install a patch. Each patch setup is specific to the ArcGIS product in the list. To determine which products are installed on your system, please see the How to identify which ArcGIS products are installed section. Esri recommends that you install the patch for each product that is on your system.

1. Download the appropriate file to a location other than your ArcGIS installation location.
   
   

   ArcGIS Enterprise 10.6.1
   ArcGIS Data Store	ArcGIS-1061-DS-Log4j-Patch.msp
   Checksum      (SHA256)	92B134D595EAD32CD5B40A884A24F9ECABC3CF311A1E8423EF68C7A95C0C41ED

   
   
2. Make sure you have write access to your ArcGIS installation location.
3. Double-click ArcGIS-1061-DS-Log4j-Patch.msp to start the setup process.
   
   NOTE: If double clicking on the MSP file does not start the setup installation, you can start the setup installation manually by using the following command:
   
   msiexec.exe /p [location of Patch]\ArcGIS-1061-DS-Log4j-Patch.msp

Complete the following install steps as the ArcGIS Install owner. The Install owner is the owner of the arcgis folder.

The ArcGIS product listed in the table must be installed on your system before you can install a patch. Each patch setup is specific to the ArcGIS product in the list. To determine which products are installed on your system, please see the How to identify which ArcGIS products are installed section. Esri recommends that you install the patch for each product that is on your system.

1. Download the appropriate file to a location other than your ArcGIS installation location.
   
   
   

   ArcGIS Enterprise 10.6.1
   ArcGIS Data Store	ArcGIS-1061-DS-Log4j-Patch-linux.tar
   Checksum      (SHA256)	95C69545B38D096F7BDC6A168AECDC6162A650CD173E23927D767A68034CBA59

   
   
2. Make sure you have write access to your ArcGIS installation location, and that no one is using ArcGIS.
3. Extract the specified tar file by typing:
   
   
   % tar -xvf ArcGIS-1061-DS-Log4j-Patch-linux.tar
 
4. Start the installation by typing:
   
   
   % ./applypatch
   
   
   This will start the dialog for the menu-driven installation procedure. Default selections are noted in parentheses ( ). To quit the installation procedure, type 'q' at any time.

• To uninstall this patch on Windows, open the Windows Control Panel and navigate to installed programs. Make sure that "View installed updates" (upper left side of the Programs and Features dialog) is active. Select the patch name from the programs list and click Uninstall to remove the patch.

Uninstalling this patch on Linux

To remove this patch on version 10.6.1, navigate to the /tmp directory and run the following script as the ArcGIS Install owner:

Notes: You can only remove the patch that was installed most recently.

Patch Updates

How to identify which ArcGIS products are installed

Getting Help

• PatchFinder for Windows
  • PatchFinder for Linux/Unix