$TXT Created by ANN at MNTVBB.DOMAIN.EXT (KIDS) on Wednesday, 05/22/19 at 09:38 ============================================================================= Run Date: DEC 30, 2019 Designation: MMRS*1*8 Package : MMRS - MRSA INITIATIVE REPORTS Priority: Mandatory Version : 1 SEQ #8 Status: Released Compliance Date: JAN 29, 2019 ============================================================================= Associated patches: (v)MMRS*1*4 <<= must be installed BEFORE `MMRS*1*8' Subject: VISTA SECURITY REMEDIATION UPDATES FOR FOUR SLASHES Category: - Routine Description: ============ Patch MMRS*1.0*8 is being released to support the security vulnerability solution for the VistA Security Remediation (VSR) program that focuses on updates to the four-slash logic (////). The modified logic will now have the data pass through the input transform before filing the data to ensure data integrity in the files. Defect: 976704 - DEF - Research/document findings for all keywords and routines for vulnerabilities within the MDRO INITIATIVE REPORTS package for coding updates (Trial) Code has been changed in the following menu options: 1. MMRS MRSA SITE PARAMETER SETUP [MRSA Tools Site Parameter Setup] 2. MMRS MDRO TOOLS SETUP MENU [MDRO Tools Setup Menu] 3. MRSA TOOLS WARD MAPPING SETUP [MRSA Tools Ward Mapping Setup] 4. MMRS MDRO HIST DAYS EDIT [MDRO Historical Days Edit] Patch Components: ----------------- Files & Fields Associated: File Name (Number) Field Name (Number) New/Modified/Deleted ------------------ ------------------- -------------------- N/A Forms Associated: Form Name File # New/Modified/Deleted --------- ------ -------------------- N/A Mail Groups Associated: Mail Group Name New/Modified/Deleted --------------- -------------------- N/A Options Associated: Option Name Type New/Modified/Deleted ----------- ---- -------------------- N/A Protocols Associated: Protocol Name New/Modified/Deleted ------------- -------------------- N/A Security Keys Associated: Security Key Name ----------------- N/A Templates Associated: Template Name Type File Name (Number) New/Modified/Deleted ------------- ---- ------------------ -------------------- N/A Additional Information: New Service Requests (NSRs): ---------------------------- N/A Patient Safety Issues (PSIs): ----------------------------- N/A Defect Tracking System Ticket(s) & Overview: -------------------------------------------- N/A Problem: ------- N/A Resolution: ---------- N/A Test Sites: ---------- West Palm Beach VA Medical Center, FL VA Central Iowa Health Care System (Des Moines), IA Software and Documentation Retrieval Instructions: -------------------------------------------------- Documentation describing the new functionality and/or a host file containing a build may be included in this release. The preferred method is to retrieve the files from download.vista.domain.ext. This transmits the files from the first available server. Sites may also elect to retrieve the files directly from a specific server. Sites may retrieve the software and/or documentation directly using Secure File Transfer Protocol (SFTP) from the ANONYMOUS.SOFTWARE directory at the following OI Field Offices: Hines: domain.ext Salt Lake City: domain.ext Documentation can also be found on the VA Software Documentation Library at: https://www.domain.ext/vdl/ Title File Name FTP Mode ---------------------------------------------------------------------- N/A Patch Installation: ------------------- Pre/Post Installation Overview: This patch may be installed with users on the system although it is recommended that it be installed during non-peak hours to minimize potential disruption to users. This patch should take less than 5 minutes to install. Pre-Installation Instructions: N/A Installation Instructions: 1. If the release is provided using PackMan, choose the PackMan message containing this build. Then select the INSTALL/CHECK MESSAGE PackMan option to load the build. If this release is provided using a Host file, use the Load a Distribution option contained on the Kernel Installation and Distribution System Menu to load the Host file. 2. From the Kernel Installation and Distribution System Menu, select the Installation Menu. From this menu, A. Select the Verify Checksums in Transport Global option to confirm the integrity of the routines that are in the transport global. When prompted for the INSTALL NAME enter the patch or build name (MMRS*1.0*8). B. Select the Backup a Transport Global option to create a backup message of any routines exported with this patch. It will not backup any other changes such as Data Dictionaries, templates, etc. C. You may also elect to use the following options: i. Print Transport Global - This option will allow you to view the components of the KIDS build. ii. Compare Transport Global to Current System - This option will allow you to view all changes that will be made when this patch is installed. It compares all of the components of this patch, such as routines, DDs, templates, etc. D. Select the Install Package(s) option and choose the patch to install. i. If prompted 'Want KIDS to Rebuild Menu Trees Upon Completion of Install? NO//', answer NO. ii. When prompted 'Want KIDS to INHIBIT LOGONs during the install? NO//', answer NO. iii. When prompted 'Want to DISABLE Scheduled Options, Menu Options, and Protocols? NO//', answer YES. a. When prompted 'Enter options you wish to mark as 'Out Of Order':', select the following options: Option Name Menu Text ----------- --------- MMRS MRSA SITE PARAMETER SETUP [MRSA Tools Site Parameter Setup] MMRS MDRO TOOLS SETUP MENU [MDRO Tools Setup Menu] MRSA TOOLS WARD MAPPING SETUP [MRSA Tools Ward Mapping Setup] MMRS MDRO HIST DAYS EDIT [MDRO Historical Days Edit] Post-Installation Instructions: N/A Back-Out Plan: This patch consists of routines. During the VistA Installation Procedure of the PackMan message, the installer should back up the modified routines by the use of the 'Backup a Transport Global' action (step 2b in the Installations Instructions above). If rollback/backout is required, the installer can restore the routines using the MailMan message that were saved prior to installing the Routine Information: ==================== The second line of each of these routines now looks like: ;;1.0;MRSA PROGRAM TOOLS;**[Patch List]**;Mar 22, 2009;Build 2 The checksums below are new checksums, and can be checked with CHECK1^XTSUMBLD. Routine Name: MMRSIPCP Before: B45727414 After: B46827342 **1,3,4,8** Routine list of preceding patches: 4 ============================================================================= User Information: Entered By : Date Entered : APR 26, 2019 Completed By: Date Completed: DEC 30, 2019 Released By : Date Released : DEC 30, 2019 ============================================================================= Packman Mail Message: ===================== $END TXT