Esri have recently announced upcoming improvements to ArcGIS Online in order to maintain the highest industry standards for data integrity and network security. Starting on 20 February 2019, ArcGIS Online will only accept TLS 1.2 connections for ArcGIS Online services. Some software, like ArcGIS Pro, are already TLS 1.2 enabled. Other Esri software, such as ArcGIS Desktop, uses TLS 1.0—this software requires a patch or configuration change to support TLS 1.2 connections. Esri is releasing patches and instructions to update existing software to support these connections.
What is TLS?
TLS or “Transport Layer Security” is a widely deployed network security protocol. It provides privacy and data integrity between communicating applications over a network. You use TLS whenever accessing ArcGIS Online services, such as basemaps, geoprocessing services, and the Living Atlas, from ArcGIS Desktop, ArcGIS Enterprise, and other applications.
17 December 2018
Esri has announced that they have discovered a critical security vulnerability in Portal for ArcGIS when specially constructed steps are taken by authenticated users. This results in a privilege escalation issue where the user can elevate themselves to become administrators of the portal.
This issue is present in all supported versions of Portal for ArcGIS, on both Windows and Linux operating systems. Esri has released patches for all versions of Portal for ArcGIS, from version 10.3 through 10.6.1.
Esri have published the following Knowledge Base article relating to this issue: Problem: Warning of security vulnerability in Portal for ArcGIS
Esri has discovered a severe issue with an editing workflow in ArcGIS Pro 2.2 Patch 2 (2.2.2) that may incorrectly set feature attribute field values to ‘Null’ when using the Attributes pane.
This problem occurs when multiple features are selected in the tree view of the Attributes pane. If the Tab key is used to navigate between cells in the data grid, tabbing through a cell that displays “(Different values)” sets the field to ‘Null’.
Esri strongly recommends to uninstall the patch.
- On Windows, open the Control Panel.
- Search for View installed updates. Click this option.
- Right-click ‘ArcGIS Pro 2.2 Patch 2 (2.2.2)’ and select Uninstall.
If the previous patch—ArcGIS Pro 2.2 Patch 1 (2.2.1)—is not installed, it can be downloaded from My Esri.
How will Esri correct the issue?
ArcGIS Pro 2.2 Patch 3 (2.2.3) becomes available in early October 2018 and includes a fix for this issue, as well as the other software improvements included with Patches 1 and 2. ArcGIS Pro 2.2 Patch 2 (2.2.2) is no longer available for download.
For continued updates and information regarding this problem, refer to the ArcGIS Pro 2.2.2 announcement on GeoNet.
Esri have also published the following technical article relating to this issue: https://support.esri.com/en/technical-article/000019162
Update 05 Oct 2018: ArcGIS Pro 2.2 Patch 3 (2.2.3) is available for download from My Esri.
If you have any questions or concerns, please contact your local Esri distributors support team (for Esri Australia clients, use My Esri, email@example.com or 1800 447 111)
FAQ: How do you determine the version of an enterprise (ArcSDE) geodatabase in Catalog?
To determine the enterprise geodatabase version you are using:
- Right-click the database connection in the Catalog tree and click Properties > General Tab.
- The Upgrade Status indicates the geodatabase version you are using.
- If the Upgrade Status indicates that the geodatabase matches the ArcGIS release you are using, your geodatabase is compatible with your ArcGIS release, and you do not need to upgrade the geodatabase.
- If system tables or stored procedures need to be upgraded, the text will state that your geodatabase can be upgraded and the Upgrade Geodatabase button will be active.
I’d like to highlight the following changes at ArcGIS 10.3 for Geodatabases:
Debugging geoprocessing scripts in Python is never easy, especially when these scripts are run as a scheduled task.
I’ve had a number of requests of how to debug a scheduled python script (especially when issues occur), and write the output to a text file.
Please find below a simple python script that I hope will help others to debug their scripts: Continue reading
With the release of 10.2 and plans to deprecate the ArcSDE command line tools, there has been lots of talk about how all these tools will be replaced.
The following technical blog and forum addresses some of the questions you may have regarding the deprecation of the SDE command line tools: Continue reading