============================================================================= Run Date: DEC 15, 2022 Designation: MHV*1*82 Package : MHV - MYHEALTHEVET Priority: Mandatory Version : 1 SEQ #74 Status: Released Compliance Date: DEC 30, 2022 ============================================================================= Subject: MYHEALTHEVET MAJOR RELEASE MHV_2212.2 INFORMATIONAL PATCH Category: - Informational Description: ============ MyHealtheVet Program Major Release (MHV_2212.2) will be promoted to the MHV Production environment on Wednesday, December 14, 2022 starting at 9:00PM EDT. ========================================================================== MHV Development Team Enhancements (NATIONAL RELEASE): ========================================================================== MHV Appointments MHV-20993 NP 508 Compliance Violations - VA Appointment Page MHV Batch MHV-35476 Exclude log4j-1.2.17 Transitive Dependency (mhv-np-getcare-batch) (mhv-np-getcare-batch) MHV-35477 Exclude log4j-1.2.17 Transitive Dependency (mhv-np-user-batch) MHV-35478 Exclude log4j-1.2.17 Transitive Dependency (mhv-np-rxrefill-batch) MHV-35918 All NP development projects to use upper common-parent range (Common dependency MHV-19508) mhv-np-getcare-batch mhv-np-rxrefill-batch mhv-np-user-batch MHV Database MHV-38971 Add VA Health Cerner login link properties MHV_PROPS MHV Properties Configuration MHV-36117 SM Clinician API National Portal Authentication Feature Rollout & Validation MHV JWT Authorization Configuration Change MHV-38495 SM Clinician API National Portal Authentication Feature Production Rollout & Monitoring MHV Health Records MHV-28864 Fortify Low: Code Correctness: Constructor Invokes Overridable Function MHV-35308 (SECURITY) [HIGH] Story: Fortify Issue - Log Forging - mhv-np-bluebutton-api MHV-35518 (SECURITY) [HIGH] Story: Fortify Issue - Unreleased Resource: Streams - mhv-np-bluebutton-api MHV National Portal MHV-35519 (SECURITY) [HIGH] Story: Fortify Issue - XML External Entity Injection - mhv-np-osccd-api MHV-37916 Users needs to be told that password hint answers are case sensitive MHV-38314 Content for Need Help section on Sign in Page MHV-38423 SQA: Incorrect time displayed on account locked out error message MHV-38461 AVS: Add a progress icon on the Detail page of the AVS to display before the iFrame is loaded. MHV-39478 PROD: 508 Issue - Screen Reader not picking File Attachment pop-up MHV-39502 SQA: SM Patient 508 Issue- After a file attachment is added or removed, JAWS screen reader starts reading from the top of the page. MHV Pharmacy MHV-36540 Update GUI for transferred medications - Development MHV-37914 Defect: RxAPI RxRefill List Interface isRefillable logic is incorrect MHV PHR MHV-35321 (SECURITY) [HIGH] Story: Fortify Issue - Log Forging - mhv-np-phr-api MHV-35521 (SECURITY) [HIGH] Story: Fortify Issue - Null Dereference - mhv-np-phr-api MHV Security MHV-36117 SM Clinician API National Portal Authentication Feature Rollout & Validation [Dark Deploy] MHV-38740 SQA Defect (SM Clinician): System displays "Unauthorized" error in the logs when user's network id contains mixed case characters in SMS database. MHV Secure Messaging Clinician MHV-32699 PROD (SM Clinician Redesign): on the WLC form if the Problem List value is large, it is getting cut off MHV-33511 Update mhv-sm-clinician-messagemgmt-portlet to use JWT Security Approach MHV-36117 SM Clinician API National Portal Authentication Feature Rollout & Validation MHV-38005 SQA Defect (SM Clinician): Extra-long URL is displayed outside the message box on 'Save message as CPRS Progress Note'' page. MHV-38169 Prod: Message in escalated report but not displaying in clinician Inbox - Root Cause fix MHV-38495 SM Clinician API National Portal Authentication Feature Production Rollout & Monitoring MHV-38547 SM Clinician Security - Errors with Reply with Attachments Flow MHV-38571 SM Clinician Security - Error Messages missing on 401 Error MHV-38740 SQA Defect (SM Clinician): System displays "Unauthorized" error in the logs when user's network id contains mixed case characters in SMS database. MHV-39417 SQA Defect: SM Clinician IntB (DXP and 6.2)- When Clinician's status is 'Inactive', system does not display appropriate error message on the Clinician login page MHV-39418 SQA Defect: SM Clinician IntB (DXP and 6.2)- When Clinician's status is 'Opted-out', system does not display appropriate error message on the Clinician login page. Routine Information: ==================== No routines included. ============================================================================= User Information: Entered By : Date Entered : DEC 14, 2022 Completed By: Date Completed: DEC 14, 2022 Released By : Date Released : DEC 15, 2022 ============================================================================= Packman Mail Message: ===================== No routines included