Patches and updates

ArcGIS Workflow Manager Server 10.9.1 Patch for Log4j

Published: April 5, 2022

Summary

This security patch addresses multiple security vulnerabilities found in log4j distributed with ArcGIS Workflow Manager Server. Esri recommends that all customers using ArcGIS Workflow Manager Server 10.9.1 apply this patch.

Description

Issues addressed with this Patch

BUG-000145363: Update Log4j to address security vulnerabilities.

Windows installation steps:

Note: ArcGIS Workflow Manager Server 10.9.1 must be installed before installing this patch.
Make sure you have write access to the Workflow Manager Server installation location, and that no one is accessing it.

Download the file to a location other than the Workflow Manager Server installation location.

Workflow Manager Server file:	WorkflowManagerServer_10.9.1_Patch1.msp
Checksum (SHA256)	`d80795873b250aeea33a8a2c1be10dc709616ec75da61577209e8eaff2a0a675`

Double-click the MSP file to start the setup process.
When Setup starts, follow the instructions on your screen.

Linux installation steps:

Note: ArcGIS Workflow Manager Server 10.9.1 must be installed before installing this patch.
Login as the user that installed ArcGIS Server which is the owner of the arcgis folder.

Download the file to a location other than the Workflow Manager Server installation location.

Workflow Manager Server file:	WorkflowManager-10.9.1-Patch1.tar.gz
Checksum (SHA256)	`e13bd1c8070a40799f852ece103bdda96c792a28eff03d8ce2eeb9e5b02541af`

Extract the package:
% tar -xzvf WorkflowManager-10.9.1-Patch1.tar.gz
Start the installation:
% ./WorkflowManagerServer/Patch.sh

How to identify which Service Packs and Patches are installed

To find out what ArcGIS products are currently installed on your machine, download the PatchFinder utility and run it from your local machine.

Service Pack and Patch Updates

Check Online Support Center periodically for the availability of additional service packs and patches.

Getting Help

Domestic sites, please contact Esri Technical Support at 1-888-377-4575, if you have any difficulty installing this patch. International sites, please contact your local Esri software distributor.