Pharmacy Enterprise Customization System (PECS) is a Java 2 Enterprise ============================================================================= Run Date: JAN 17, 2024 Designation: PREC*6.2*4 Package : PREC - PHARMACY ENTERPRISE CUSTOM S Priority: Mandatory Version : 6.2 SEQ #4 Status: Released Compliance Date: FEB 16, 2024 ============================================================================= Subject: PECS - Customization Error and TRM Compliance Update Category: - Informational - Other Description: ============ Pharmacy Enterprise Customization System (PECS) is a Java 2 Enterprise Edition (J2EE) application used to research, review, report, and manage customized drug information from First Data Bank's (FDB) MedKnowledge Framework. The PECS application, through a web-based Graphical User Interface (GUI), allows VHA pharmacists and clinicians to research and request custom changes to Drug-Drug Interaction, Drug Pairs, Dose Range, Duplicate Therapy, and Professional Monograph records, controlling access through a role based authorization. The purpose of this patch is to address a performance issue related to customizing a drug-drug interaction in PECS application. Additionally, to comply with the Technical Reference Model (TRM), Log4j has been updated to version 2.20.0 to remediate security vulnerabilities found in the older versions of log4j. There are no changes to user-visible functionality. Patch Components: ----------------- Files & Fields Associated: File Name (Number) Field Name (Number) New/Modified/Deleted ------------------ ------------------- -------------------- N/A Forms Associated: Form Name File Number New/Modified/Deleted --------- ----------- -------------------- N/A Mail Groups Associated: Mail Group Name New/Modified/Deleted --------------- -------------------- N/A Options Associated: Option Name Type New/Modified/Deleted ----------- ---- -------------------- N/A Protocols Associated: Protocol Name New/Modified/Deleted ------------- -------------------- N/A Security Keys Associated: Security Key Name ----------------- N/A Templates Associated: Template Name Type File Name (Number) New/Modified/Deleted ------------- ---- ------------------ -------------------- N/A Remote Procedures Associated: Remote Procedure Name New/Modified/Deleted --------------------- -------------------- N/A Parameter Definitions Associated: Parameter Name New/Modified/Deleted -------------- -------------------- N/A New Service Requests (NSRs): --------------------------- N/A Patient Safety Issues (PSIs): ---------------------------- N/A JIRA Task Id ----------------- Number: HDSO-2630 Defect Tracking System Ticket(s) & Overview: ------------------------------------------- 1. INC25025348 - Unable to customize an interaction in PECS Problem 1: -------- Unable to customize a drug-drug interaction in the PECS GUI because there are so many drug pairs associated (~67,000+) that the PECS application times out before the operation can be completed. Resolution 1: ----------- Updated the PECS Java code to address the process of customizing drug-drug interaction pairs and then creating a new Custom Update in PECS application. 2. Log4j- Updated from 2.17.1 to 2.20.0 Problem 2: ---------- PECS application contains Java components which are subject to compliance with Technical Reference Model (TRM) to maintain authority to operate (ATO). Resolution 2: ----------- Log4j Logging framework has been updated to be compliant with Technical Reference Model (TRM) and to remediate security vulnerabilities. Log4j has been upgraded from 2.17.1 to TRM approved version 2.20.0. Test Sites: ---------- User acceptance testing successfully completed by the Business Office. SNOW Change Order #: --------------------- CHG0443456 Software and Documentation Retrieval Instructions: ------------------------------------------------- PREC*6.2*4 Informational Patch is available in FORUM. Documentation can be found on the VA Documentation Library (VDL) at: https://www.domain.ext/vdl. PREC*6.2*4 Documentation can also be obtained at: https://download.vista.domain.ext/index.html/SOFTWARE. The documentation includes: Title File Name ------------------------------------------------------------------ PECS Deployment, Installation, PREC_6_2_4_DIBR.PDF Backout & Rollback Guide (DIBR) - PREC*6.2*4 PREC_6_2_4_DIBR.DOCX Patch Installation: =================== Pre-Installation Instructions: ------------------------------ N/A Installation Instructions: ------------------------- PECS is a Centralized Web application and JAVA component for this patch is being installed by AITC. NO Installation is required at local sites. The Deployment, Installation, Back-Out and Rollback Guide (DIBR) for this patch contains detailed installation instructions on how to deploy this PECS Java application patch at the Central Application Server. Post-Installation Instructions: ----------------------------- N/A Back-Out/Roll Back Plan: -------------- The backout plan is provided as part of the Deployment, Installation, Back-Out and Rollback Guide (DIBR) for this patch. Refer to section 5, Back-Out Procedure. Validation of Back-out Procedure: --------------------------------- Detailed information on the validation of back-out procedure is provided in the DIBR for this patch. Refer to section 5.7, Back-Out Verification Procedure. Routine Information: ==================== No routines included. ============================================================================= User Information: Entered By : Date Entered : JUN 05, 2023 Completed By: Date Completed: JAN 17, 2024 Released By : Date Released : JAN 17, 2024 ============================================================================= Packman Mail Message: =====================