=============================================================================
Run Date: JUL 07, 2022                     Designation: PREM*3*4
Package : PREM - MEDICATION ORDER CHECK (MOCH Priority: Mandatory
Version : 3         SEQ #4                      Status: Released
                  Compliance Date: AUG 07, 2022
=============================================================================


Subject: MOCHA - Log4j2 Upgrade for TRM Compliance

Category: 
  - Informational

Description:
============

 MOCHA application server is a component of the Medication Order Check
 Healthcare program that provides the capability to receive and validate
 the format of the request. Provided the format is correct, the MOCHA
 services will process the request by interacting with FDB's Med Knowledge
 Framework to perform the requested check and return 
 the results.
  
 The purpose of this informational patch is to comply with the Technical 
 Reference Model (TRM). Log4j2 libraries has been upgraded to version 
 2.17.1 to remediate security vulnerability found in the older versions of 
 log4j.
  
  
 Defect Tracking System Ticket(s) & Overview:  
 ============================================
  
 JIRA Task Id: MOCHA-3298
  
 Problem:
 --------
 MOCHA application contains Java components which are subject to 
 compliance with Technical Reference Model (TRM) to maintain authority to 
 operate (ATO). 
  
 Resolution:
 -----------
 Log4j Logging framework has been updated to be compliant with 
 Technical Reference Model (TRM) and to remediate security vulnerability. 
 Log4j has been upgraded from 2.14.0 to TRM approved version 2.17.1.
  
  
 Test Sites:
 -----------
 West Palm Beach VAMC (West Palm Beach, FL)
 Louisville VAMC (Louisville, KY)
  
   
 Software and Documentation Retrieval Instructions:
 -------------------------------------------------
 The PREM*3*4 Informational Patch is available in FORUM. Documentation can 
 be found in the VA Documentation Library (VDL) at: https://www.domain.ext/vdl/
  
 PREM*3*4 Documentation can also be obtained at:
  
 https://download.vista.domain.ext/index.html/SOFTWARE
  
 Title                                                   File Name
 ------------------------------------------------------------------
 Deployment, Installation,                      PREM_3_P4_DIBR.DOCX 
 Back-out, and Rollback Guide                   PREM_3_P4_DIBR.PDF
             
 Installation Guide             PREM_3_P4_MOCHA_SERVER_V3_2_1_IG.DOCX
                                PREM_3_P4_MOCHA_SERVER_V3_2_1_IG.PDF
  
   
   
 Installation Instructions:  
 -------------------------  
 This is a Java Application, and it is deployed on the centralized 
 Weblogic application server. No installation is required at local sites. 

Routine Information:
====================
No routines included.

=============================================================================
User Information:
Entered By  :                               Date Entered  : FEB 25, 2022
Completed By:                               Date Completed: JUL 06, 2022
Released By :                               Date Released : JUL 07, 2022
=============================================================================


Packman Mail Message:
=====================

No routines included