nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Log4j Vulnerabilities: Should we install Log4j Vulnerabilities patches after Esri remedy scripts had been applied

chintakandel

I'd applied Esri remedy scripts to mitigate Log4j Vulnerabilities in December 2021. Esri released Log4j Vulnerabilities patches for Portal, Server and Data Store in February 2022. I'm curious whether we have to reapply these Log4j patches since we had already applied Esri remedy scripts.

Any suggestions about reapplying Log4j patches?

Thanks,

Chintamani

Find more posts tagged with

Administration

Accepted answers

ReeseFacendini

The python scripts from December where designed to help remove the initial threat, but the patches released in February go back and permanently fix the issue by updating the affected files to the latest secured version of Log4j. It's highly recommended to apply the patches, regardless of running the mitigation scripts.

All comments

ReeseFacendini

MikeVolz

Does the patch require that the server be restarted?

ReeseFacendini

The machine does not need to be restarted, but the Enterprise site will be down for a moment while they install. It would be best to install them outside of business hours, to minimize disruption

MikeVolz

I installed the log4jpatch on a server using AGS Enterprise Patch Notifiication some time ago and under Installed Patches it shows up as installed, yet the Log4j patch also appears under Available Updates.

As such has this patch been updated so it needs to be installed again?

If so, how can I tell the most recent patch has been applied as opposed to the original patch?

Join the Conversation

Signed in members can post, follow updates, and more. New here? Register a free account.

Quick Links

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.