AnsweredAssumed Answered

Are patches for ArcGIS Server and /or Portal cummulative?

Question asked by jay.gregory on Jul 26, 2018
Latest reply on Jul 26, 2018 by DSmith-esristaff

Hi, I am planning on installing the Home Application Display patch ( on my Portal 10.4 instance.


At the bottom of the patch page, it says:

"To avoid conflicts the 10.4 version also addresses:

BUG-000099447 - Unable to upload files or create groups in the Portal home application after updating the browser to Firefox 49, Chrome 54, or Safari 10.

BUG-000098559 – Un-validated redirect in Portal for ArcGIS.

BUG-000098482 - Cross-site scripting (XSS) issue in Portal for ArcGIS.

BUG-000098118 - Portal for ArcGIS exposes internal information.

BUG-000098025 - Bypass of URL redirection rule in Portal for ArcGIS.

BUG-000096571 - The secure attribute is not present on a cookie in Portal for ArcGIS.

BUG-000096570 - Reflected cross-site scripting (XSS) is possible in Portal for ArcGIS.

BUG-000094214 - Unable to import ArcGIS Pro entitlements to Portal for ArcGIS 10.4.

BUG-000091316 - Some Portal upload operations do not validate file type correctly."


It seems like those issues listed are also fixed by (Home Application Upload Patch) and (Security 2017 Update 1 Patch). This seems like the dumb question, but if I install the Home Application Display patch, then I shouldn't have to install the other 2 patches, correct? (the language "to avoid conflicts....." seems a little strange and imprecise to me)

I haven't installed any patches yet, so am wondering if I need to install all 3 to have the issues fixed, or just the latest patch (which in this case the the Home Application Display Patch)