Transcription of FSMS Log4j Resolution Instructions
1 Log4j Vulnerability Resolution patch Instructions for FSMS 200X Family FSMS 2001, 2002, 2004 This patch should not be used on any version other than those listed above. This patch ( ) is specifically for FSMS 2001, 2002 and 2004 versions. It is intended to remove the known Log4j threat in FSMS 2001, 2002 and 2004. It should only be used on these versions. Installing the patch To install the patch , follow these steps: 1. Download the patch . 2. Copy the patch to the C:\FSMS directory. 3. Double-click on the exe file. The patch will: o Stop the FedEx Common service and FedEx ConfigManager service. o Upgrade the Log4j file to version o Remove the vulnerable class file ( ) from the package. o Restart the FedEx Common service and FedEx ConfigManager service.
2 Please note the following: Shipping will be impacted during the time the services are stopped. This should be less than 1 minute. The patch will provide remediation for the known Log4j issues for FSMS on the system it is used on. If the software is restored from a backup for any reason, the patch file will need to be run again. This patch will only impact FSMS. The Log4j vulnerability could remain on one or more of the system s other software solutions. Confirming patch Installation There are numerous ways to determine if the patch has been installed, the most definitive being the build number. The build number can be found in the FSMS Version Console. Build FSMS Build FSMS Build FSMS Other ways to identify if the patch is in use are via: Add/Remove Programs The FSMS Revisions log
