ArcGIS GeoEnrichment Server Log4j Patch

This security patch addresses multiple security vulnerabilities found in log4j distributed with ArcGIS GeoEnrichment Server. Esri recommends that all customers using ArcGIS GeoEnrichment Server 10.8.1 apply this patch.

Esri® announces the ArcGIS GeoEnrichment Server Log4j Patch. Esri recommends that all customers using ArcGIS GeoEnrichment Server 10.8.1 apply this patch. This patch deals specifically with the issue listed below under Issues Addressed with this patch.

Issues Addressed with this patch

BUG-000145426 - Update log4j to address security vulnerabilities.

Please see ArcGIS Enterprise Log4j Security Patches Available for further details.

To avoid conflicts this patch also addresses:

BUG-000133675 - GeoEnrichment Service failing when enriching large drive times
BUG-000133674 - Internal error removing data from Business Analyst Enterprise
BUG-000133301 - Generating a report with a map image with ArcGIS Business Analyst Enterprise 10.8.1 fails from some clients such as ArcGIS Pro and the Business Analyst widget in Web AppBuilder.

Installing this patch on Windows

Installation Steps:

This patch should be installed on all ArcGIS GeoEnrichment Server installations related to the ArcGIS GeoEnrichment Server site.

The ArcGIS product listed in the table must be installed on your system before you can install a patch. Each patch setup is specific to the ArcGIS product in the list. To determine which products are installed on your system, please see the How to identify which ArcGIS products are installed section. Esri recommends that you install the patch for each product that is on your system.

Download the appropriate file to a location other than your ArcGIS installation location.

ArcGIS Enterprise 10.8.1

ArcGIS GeoEnrichment Server	ArcGIS-1081-GES-Log4j-Patch.msp
Checksum (SHA256)	`21C06CD07C37381B704AC8844A1A6F46ACAA7D86D8313DD60DD7390CFECCFBDC`

Make sure you have write access to your ArcGIS installation location.
Double-click ArcGIS-1081-GES-Log4j-Patch.msp to start the setup process.

NOTE: If double clicking on the MSP file does not start the setup installation, you can start the setup installation manually by using the following command:

msiexec.exe /p [location of Patch]\ArcGIS-1081-GES-Log4j-Patch.msp

Uninstalling this patch on Windows

To uninstall this patch on Windows, open the Windows Control Panel and navigate to installed programs. Make sure that "View installed updates" (upper left side of the Programs and Features dialog) is active. Select the patch name from the programs list and click Uninstall to remove the patch.

Patch Updates

Check the Esri Support Downloads page periodically for the availability of additional patches. New information about this patch will be posted here.

How to identify which ArcGIS products are installed

To determine which ArcGIS products are installed, choose the appropriate version of the PatchFinder utility for your environment and run it from your local machine. PatchFinder will list all products, hot fixes, and patches installed on your local machine.

Getting Help

Domestic sites, please contact Esri Technical Support at 1-888-377-4575, if you have any difficulty installing this patch. International sites, please contact your local Esri software distributor.

Download ID:8026