============================================================================= Run Date: MAY 01, 2026 Designation: PREC*7*3 Package : PREC - PHARMACY ENTERPRISE CUSTOM S Priority: Mandatory Version : 7 SEQ #4 Status: Released Compliance Date: JUN 01, 2026 ============================================================================= Subject: DEFECTS FIX AND TECHNICAL REFERENCE MODEL UPGRADE Category: - Informational - Other Description: ============ The Pharmacy Enterprise Customization System (PECS) application, through a web-based Graphical User Interface (GUI), allows VHA pharmacists and clinicians to research and request custom changes to Drug-Drug Interaction, Drug Pairs, Dose Range, Duplicate Therapy, and Professional Monograph records, controlling access through a role based authorization. This informational patch addresses listed defects and brings the application into compliance with the Technical Reference Model (TRM). The main objectives are to remediate security vulnerabilities in outdated versions of log4j and ESAPI and to resolve various functional issues. No user-visible functionality changes are introduced beyond the fixes described below. 1. PECS-687: Upgrade Log4j from 2.23.1 to 2.25.1 and ESAPI from 2.5.4.0 to 2.6.0.0 2. PECS-690: Content is not being saved when entered in Contact Us > Edit Content > Save 3. PECS-686: Remove unused FDB 3.3 version variable from the pom.xml 4. PECS-677: Advance Query/Customization page - Save Query button overlaps the Query Name field EHRM Impact Statement: ---------------------- This patch should have no EHRM impact, and can be installed at all sites, including EHRM converted sites. Files & Fields Associated: File Name (Number) Field Name (Number) New/Modified/Deleted ------------------ ----------------- ------------------- Not Applicable (N/A) Forms Associated: Form Name File Number New/Modified/Deleted --------- ----------- -------------------- N/A Mail Groups Associated: Mail Group Name New/Modified/Deleted --------------- -------------------- N/A Options Associated: Option Name Type New/Modified/Deleted ----------- ---- -------------------- N/A Protocols Associated: N/A Protocol Name New/Modified/Deleted ------------- -------------------- N/A Security Keys Associated: Security Key Name ----------------- N/A Templates Associated: Template Name Type File Name (Number) New/Modified/Deleted ------------- ---- ----------------- -------------- N/A Remote Procedures Associated: Remote Procedure Name New/Modified/Deleted ------------------- ---------------- N/A Parameter Definitions Associated: Parameter Name New/Modified/Deleted -------------- -------------------- N/A Additional Information: New Service Requests (NSRs): ---------------------------- N/A Patient Safety Issues (PSIs): ----------------------------- N/A Defect Tracking System Ticket(s) & Overview: ============================================ 1. PECS-687- Upgrade Log4j from 2.23.1 to 2.25.1 and ESAPI from 2.5.4.0 to 2.6.0.0. Problem 1: ---------- Java components require upgrade for TRM compliance. Resolution 1: ------------ Application libraries upgraded to comply with TRM (Log4j and ESAPI). 2. PECS-690- Content is not being saved when entered in Contact Us > Edit Content> Save Problem 2: ---------- Content is not being saved when entered in Contact Us > Edit Content> Save. Resolution 2: ------------ Fix has been implemented to save the edited content. Java code has been modified. 3. PECS-686- Remove unused FDB 3.3 version variable from the pom.xml Problem 3: --------- Remove unused FDB 3.3 version variable from the pom.xml Resolution 3: ------------ Java code has been modified. 4. PECS-677 - Advance Query/Customization page - Save Query button overlaps the Query Name field. Problem 4: --------- Advance Query/Customization page - Save Query button overlaps the Query Name field. Resolution 4: ------------ Java code updated by adding style fix to resolve this issue. Test Sites: ----------- User Acceptance Testing (UAT) completed by the Business Office, Pharmacy Benefits Management (PBM). SNOW Change Order #: --------------------- CHG0720168 Software and Documentation Retrieval Instructions: ------------------------------------------------------------------- This is a Web Application, JAVA Build with a Centralized Server promotion. Other Software Files: N/A Documentation describing the new functionality is included in this release. Documentation can be found on the VA Software Documentation Library at: https://www.domain.ext/vdl/. Documentation can also be obtained at https://download.vista.domain.ext/index.html/SOFTWARE. Documentation Title File Name -------------------------------------------------------------------------- PECS 7.0.3 Deployment, Installation, PREC_7_0_3_DIBR.DOCX Back-Out & Rollback Guide (DIBR) PREC_7_0_3_DIBR.PDF PECS 7.0.3 Release Notes PREC_7_0_3_RN.DOCX PREC_7_0_3_RN.PDF Patch Installation: ------------------- No installation is required at Local sites. ****** This is an informational patch ONLY. ****** Pre/Post Installation Overview: N/A Pre-Installation Instructions: N/A Installation Instructions: PECS is a Centralized Web application and JAVA component for this patch is being installed by AITC. The Deployment, Installation, Back-Out and Rollback Guide (DIBR) for this patch contains detailed installation instructions on how to deploy this PECS Java application patch at the Central Application Server. Post-Installation Instructions: N/A Back-Out/Roll Back Plan: ------------------------ Refer to the PECS 7.0.3 Deployment, Installation, Back-Out & Rollback Guide (DIBR). Routine Information: ==================== No routines included. ============================================================================= User Information: Entered By : Date Entered : MAY 23, 2025 Completed By: Date Completed: APR 27, 2026 Released By : Date Released : MAY 01, 2026 ============================================================================= Packman Mail Message: ===================== No routines included