Portal for ArcGIS QuickCapture Security Patch

• BUG-000145824 An unvalidated redirect occurs in ArcGIS QuickCapture web designer.
  
  Please refer to the blog post Portal for ArcGIS Quick Capture Security Patch for further details.

Installation Steps:

This patch should be installed on all Portal for ArcGIS installations related to the Portal for ArcGIS site.

The ArcGIS product listed in the table must be installed on your system before you can install a patch. Each patch setup is specific to the ArcGIS product in the list. To determine which products are installed on your system, please see the How to identify which ArcGIS products are installed section. Esri recommends that you install the patch for each product that is on your system.

1. Download the appropriate file to a location other than your ArcGIS installation location.
   
   

   ArcGIS Enterprise 10.9.1
   Portal for ArcGIS	ArcGIS-1091-PFA-QCS-Patch.msp
   Checksum      (SHA256)	88B6BBA46433417F9960216FB36BC572811129F33EC5C4F9FB16C51E16A4E418
   ArcGIS Enterprise 10.9
   Portal for ArcGIS	ArcGIS-109-PFA-QCS-Patch.msp
   Checksum      (SHA256)	F298BAFE6960DEC91F040A1762414E05120EEAE5AADC7FA95B4FD1221CD363E4
   ArcGIS Enterprise 10.8.1
   Portal for ArcGIS	ArcGIS-1081-PFA-QCS-Patch.msp
   Checksum      (SHA256)	A554192BFA17D866709AAAF8458436A0E7A78F36E6CE64A226793844032CA05C

   
   
2. Make sure you have write access to your ArcGIS installation location.
3. Double-click ArcGIS-<Version>-PFA-QCS-Patch.msp to start the setup process.
   
   NOTE: If double clicking on the MSP file does not start the setup installation, you can start the setup installation manually by using the following command:
   
   msiexec.exe /p [location of Patch]\ArcGIS-<Version>-PFA-QCS-Patch.msp

Complete the following install steps as the ArcGIS Install owner. The Install owner is the owner of the arcgis folder.

The ArcGIS product listed in the table must be installed on your system before you can install a patch. Each patch setup is specific to the ArcGIS product in the list. To determine which products are installed on your system, please see the How to identify which ArcGIS products are installed section. Esri recommends that you install the patch for each product that is on your system.

1. Download the appropriate file to a location other than your ArcGIS installation location.
   
   
   

   ArcGIS Enterprise 10.9.1
   Portal for ArcGIS	ArcGIS-1091-PFA-QCS-Patch-linux.tar
   Checksum      (SHA256)	73BCC1FA39483E658E062348D5096435DA2B61AC5F9069F521FFBEDBF4A6031A
   ArcGIS Enterprise 10.9
   Portal for ArcGIS	ArcGIS-109-PFA-QCS-Patch-linux.tar
   Checksum      (SHA256)	CB9B608CE623F964D2E86100CC2C4580843EE83DB674F9851F6CEB16D47BFC3E
   ArcGIS Enterprise 10.8.1
   Portal for ArcGIS	ArcGIS-1081-PFA-QCS-Patch-linux.tar
   Checksum      (SHA256)	EBCF866A0DAE4BBD1B699F1AD9C51B0F5D480D186545A60CA2E43098E68229B7

   
   
2. Make sure you have write access to your ArcGIS installation location, and that no one is using ArcGIS.
3. Extract the specified tar file by typing:
   
   
   
   % tar -xvf ArcGIS-<Version>-PFA-QCS-Patch-linux.tar
4. Start the installation by typing:
   
   
   
   % ./applypatch
   
   
   This will start the dialog for the menu-driven installation procedure. Default selections are noted in parentheses ( ). To quit the installation procedure, type 'q' at any time.

• To uninstall this patch on Windows, open the Windows Control Panel and navigate to installed programs. Make sure that "View installed updates" (upper left side of the Programs and Features dialog) is active. Select the patch name from the programs list and click Uninstall to remove the patch.
  

• To remove this patch on versions 10.7 and higher, navigate to the <Product Installation Directory>/.Setup/qfe directory and run the following script as the ArcGIS Install owner:
  
  
  
  ./removepatch.sh
  
  
  

  The removepatch.sh script allows you to uninstall previously installed patches or hot fixes. Use the -s status flag to get the list of installed patches or hot fixes ordered by date. Use the -q flag to remove patches or hot fixes in reverse chronological order by date they were installed. Type removepatch -h for usage help.

• Restart your ArcGIS services

Check the Esri Support Downloads page periodically for the availability of additional patches. New information about this patch will be posted here.

To determine which ArcGIS products are installed, choose the appropriate version of the PatchFinder utility for your environment and run it from your local machine. PatchFinder will list all products, hot fixes, and patches installed on your local machine.

Domestic sites, please contact Esri Technical Support at 1-888-377-4575, if you have any difficulty installing this patch. International sites, please contact your local Esri software distributor.