=============================================================================
Run Date: SEP 11, 2026                     Designation: PREM*4*6
Package : PREM - MEDICATION ORDER CHECK (MOCH Priority: Mandatory
Version : 4         SEQ #4                      Status: Released
                  Compliance Date: OCT 12, 2026
=============================================================================


Subject: UPGRADE LOG4J AND ESAPI

Category: 
  - Informational

Description:
============

 Medication Order Check Healthcare Application (MOCHA) application server
 is a component of the Medication Order Check Healthcare program that
 provides the capability to receive and validate the format of the request.
 Provided the format is correct, the MOCHA services will process the
 request by interacting with First Databank (FDB) Med Knowledge 
 Framework to perform the requested check and return the results.
  
 The purpose of this informational patch is to comply with the Technical 
 Reference Model (TRM). Log4j has been updated to be Compliant with
 Technical Reference Model (TRM) to remediate security vulnerability. Log4j
 has been upgraded from 2.23.1 to 2.25.3 and ESAPI from esapi-2.5.2.0 to
 esapi-2.7.1.0 be compliant with TRM.
  
 EHRM Impact Statement:
 ----------------------
 This patch should have no EHRM impact, and can be installed at all sites, 
 including EHRM converted sites.
  
 Files & Fields Associated:
  
 File Name (Number)         Field Name (Number)       New/Modified/Deleted
 ------------------         -------------------       -------------------
 Not Applicable (N/A) 
  
  
 Forms Associated:
  
 Form Name       File Number     New/Modified/Deleted
 ---------       -----------     --------------------
 N/A 
  
 Mail Groups Associated:
  
 Mail Group Name New/Modified/Deleted
 --------------- --------------------
 N/A 
  
 Options Associated:
  
 Option Name     Type    New/Modified/Deleted
 -----------     ----    --------------------
 N/A 
  
 Protocols Associated:
 N/A 
  
 Protocol Name   New/Modified/Deleted
 -------------   --------------------
 N/A 
  
 Security Keys Associated: 
  
 Security Key Name
 -----------------
 N/A 
  
 Templates Associated:
  
 Template Name         Type    File Name (Number)     New/Modified/Deleted
 -------------         ----    ------------------     -------------------
 N/A 
  
 Remote Procedures Associated:
  
 Remote Procedure Name       New/Modified/Deleted
 ---------------------       --------------------
 N/A 
  
 Parameter Definitions Associated:
  
 Parameter Name  New/Modified/Deleted
 --------------  --------------------
 N/A 
  
  
 Additional Information:
  
 Blood Bank Team Coordination:
 ----------------------------
 N/A 
  
 New Service Requests (NSRs):
 ----------------------------
 N/A 
  
 Patient Safety Issues (PSIs):
 -----------------------------
 N/A 
  
 Defect Tracking System Ticket(s) & Overview:
 ============================================
 1. MOCHA-5866 - Upgrade Log4j for MOCHA (for coding)
  
 Problem:
 --------
  Java components required upgrade for TRM compliance.
  
 Resolution:
 -----------
 Application libraries upgraded to comply with TRM (Log4j).
  
  
 2. MOCHA-5875 - Upgrade ESAPI for MOCHA (for coding)
  
 Problem:
 --------
 Java components required upgrade for TRM compliance.
  
 Resolution: 
 -----------
 Application libraries upgraded to comply with TRM (ESAPI).
  
  
 Test Sites:
 -----------
 VA Loma Linda HCS Loma Linda, CA
 VA West Palm Beach HCS West Palm Beach, FL
  
  
 Test Sites - SNOW Change Order #:
 ---------------------------------
  
  
 Software and Documentation Retrieval Instructions:
 ------------------------------------------------- 
 This is an informational patch with documentation changes.
  
 Other Software Files:
 This release does not include other software files.      
  
 File Title                        File Name             Format
 --------------------------------------------------------------------------
 N/A
  
 Documentation describing the new functionality is included in this 
 release. Documentation can be found on the VA Software Documentation 
 Library at: https://www.domain.ext/vdl/. Documentation can also be 
 obtained at https://download.vista.domain.ext/index.html/SOFTWARE.
  
 Documentation Title                             File Name
 ---------------------------------------------------------------------
 Mocha 4.0.6 Deployment, Installation,           PREM_4_0_P6_DIBR.DOCX
 Back-Out & Rollback Guide (DIBR)                PREM_4_0_P6_DIBR.PDF
  
 Patch Installation:
 -------------------
 This is a Web Application JAVA Build. This is a Centralized Server
 promotion. 
 ****** This is an informational patch ONLY. ******
 ****** There is NO install to be done by sites. ****** 
   
 Pre/Post Installation Overview:
 N/A
 Pre-Installation Instructions:
 N/A
 Installation Instructions:
 N/A
 Post-Installation Instructions:
 N/A
  
 Back-Out/Roll Back Plan:
 ------------------------
 Refer to the Mocha 4.0.6 Deployment, Installation, Back-Out & Rollback 
 Guide (DIBR).

Routine Information:
====================
No routines included.

=============================================================================
User Information:
Entered By  :                               Date Entered  : MAY 01, 2026
Completed By:                               Date Completed: SEP 09, 2026
Released By :                               Date Released : SEP 11, 2026
=============================================================================


Packman Mail Message:
=====================

No routines included