=============================================================================
Run Date: APR 06, 2023                     Designation: PRED*3*5
Package : PRED - PHARMACY DATA UPDATE (DATUP) Priority: Mandatory
Version : 3         SEQ #5                      Status: Released
                  Compliance Date: MAY 07, 2023
=============================================================================


Subject: DATUP 3.1.03 TECHNICAL REFERENCE MODEL (TRM) COMPLIANCE

Category: 
  - Informational
  - Other

Description:
============

 Data and Table Update Process (DATUP) is a utility that runs an automated
 process to maintain the First Data Bank Drug Information Framework
 (FDB-DIF) and VA custom data used by Medication Order Check Healthcare
 Application (MOCHA) servers. It is also used at the National level by
 Pharmacy Enterprise Customization System (PECS) and Pharmacy Product
 System - National (PPS-N). 
  
 The purpose of this patch is to upgrade Log4j version from 2.10.0 to 
 2.19.0 to comply with the VA Technical Reference Model (TRM).
    
 Defect Tracking System Ticket(s) & Overview:
 --------------------------------------------
 JIRA Task Id: HDSO-3869
   
 Problem: 
 --------
 DATUP application contains Java Enterprise components which are subject 
 to Technical Reference Model (TRM) to maintain authority to operate 
 (ATO). Routine Fortify scanning and remediation is performed to maintain 
 compliance.  
  
 Resolution:
 -----------
 DATUP patch PRED*3.0*5 was upgraded to Log4j version from 2.10.0 to 2.19.0
 to be compliant with Technical Reference Model (TRM).    
  
  
 Test Sites:
 -----------
 User acceptance testing completed by the Business Office.
   
 Software and Documentation Retrieval Instructions:
 -------------------------------------------------
 The patch will be released in Forum via PackMan MailMan message. For the 
 Java installation, this patch is being released by AITC. 
  
 Other Software Files:
 ---------------------
 This release also includes other software files.  They can be obtained at 
 location: /srv/vista/patches/SOFTWARE     
  
 File Title                             File Name                       
 -------------------------------------------------------------------
 Deployment, Installation               PRED_3_1_03_P5_DIBR.DOCX
 Back-Out, and Rollback Guide 
  
 Patch Installation:
 -------------------
  
  
 Installation Instructions:
  
 Patch will be installed by AITC. No action is needed at the sites.
 For further information on installation of the patch, refer to the section
 2 (Deployment) in the PRED_3_1_03_P5_DIBR.DOCX.
  
 Back-Out/Roll Back Plan:
 ------------------------
 Patch will be backed out by AITC. For further information on the back out
 of the patch, refer to the section 4 (Back-Out Procedure) in the
 PRED_3_1_03_P5_DIBR.DOCX.

Routine Information:
====================
No routines included.

=============================================================================
User Information:
Entered By  :                               Date Entered  : FEB 13, 2023
Completed By:                               Date Completed: MAR 21, 2023
Released By :                               Date Released : APR 06, 2023
=============================================================================


Packman Mail Message:
=====================

No routines included