Home

Alert: HS2020-03: Multiple HealthShare Alerts

Alert: HS2020-03: Multiple HealthShare Alerts

Mar 25, 2020

March 25, 2020

This post is part of the HealthShare HS2020-03 Alert communications process. The same information is also distributed:

By Email
On the Developer Community
On the WRC Distribution Page InterSystems Documents

There are 7 alerts in the HealthShare HS2020-03 Alert communication, including the previously posted " Alert: Possible Data Integrity Issues after Compaction or Defragmentation" The Alert Summary is in the table below, and the detail is contained in the attached document: HS2020-03-Communication

Alert	Product & Versions Affected	Risk Category & Score
HS2020-03-01: Break-the-Glass Events not Properly Audited for ODS	HealthShare Unified Care Record 2019.1 and 2019.2 using the Operational Data Store	4-High Risk (Privacy)
HS2020-03-02: Archiving of Historical Aliases Causes System Hang	HealthShare Patient Index 2018.1, 2019.1, and 2019.2	3-Medium Risk (Operational)
HS2020-03-03: Permissions to Access Patient Records Vary Between Clinical Viewer v1 and v2	HealthShare Information Exchange and Unified Care Record v2 viewer in 2018.1, 2019.1 and 2019.2	4-High Risk (Privacy)
HS2020-03-04: Invalid Handling of Improperly Formatted Reference Ranges in HL7 V2 Result Messages	HealthShare Information Exchange 15.03 and 2018.1; Unified Care Record 2019.1 and 2019.2	3-Medium Risk (Clinical)
HS2020-03-05: AngularJS 1.5.8 Vulnerability	All versions of HealthShare Personal Community	External (Security)
HS2020-03-06: “LogCounter” in Access Gateway is Reset on Upgrade	All versions of HealthShare Information Exchange and Unified Care Record up to and including 2019.1	3-Medium Risk (Operational)
HS2020-03-07: Possible Data Integrity Issues after Compaction or Defragmentation	All HealthShare products starting from HealthShare 15.x and Personal Community 12.x and above. HealthShare Health Connect 2019.1.0 and 2019.1.1 based on InterSystems IRIS®, and older Health Connect versions built on Cache/Ensemble 2016.2 and above.	2-Low Risk (Operational)

If you have any questions regarding this advisory, please contact the Worldwide Response Center (WRC).

Latest Alerts & Advisories

Product Alerts & Advisories

InterSystems Security Public Notification

InterSystems has addressed security vulnerabilities that impact Web Gateways and CSP Gateways for InterSystems IRIS, InterSystems IRIS for Health, HealthShare, HealthShare HealthConnect, TrakCare, Caché, and Ensemble. Remediation steps and additional guidance documentation are available from the InterSystems Worldwide Response Center (WRC). Please reference “SVR2024A” when discussing this notice. For assistance with remediation contact your Application Provider or InterSystems Worldwide Response Center.

Product Alerts & Advisories

Alert: Database Corruption with Multi-Volume Databases after Truncation

InterSystems has corrected a defect that can cause database corruption or errors with multi-volume databases under extremely rare circumstances. Only databases that have been truncated are at risk.

Risk & Safety Alert HS2024-03: Multiple Alerts for InterSystems IRIS for Health, HealthShare Health Connect and HealthShare Solutions

There are four alerts in the HS2024-03 Alert Communication. A summary of each alert is shown below. Details for each alert are contained in the linked document.

Product Alerts & Advisories

Advisory: VMware vSAN Data Consistency Errors

Broadcom recently announced a problem that can cause data consistency errors in database applications. The Broadcom article is available here:

Product Alerts & Advisories

Advisory: License Enforcement Changes – REST and SOAP

Beginning with the release of InterSystems IRIS® data platform 2022.3, InterSystems corrected the license enforcement mechanism to include REST and SOAP requests. Due to this change, environments with non-core-based licenses that use REST or SOAP may experience greater license utilization after upgrading. To determine if this advisory applies to your InterSystems license, follow the instructions in the FAQ linked below.

Product Alerts & Advisories

Alert: SQL Query using “NOT %INLIST” fails to return results

InterSystems has corrected an issue that can cause a small number of SQL queries to return incorrect results. See below for the specifics on impacted queries.

Product Alerts & Advisories

Alert: Upgrades fail for HealthShare Health Connect instances not licensed for HL7® FHIR®

InterSystems has encountered a defect that causes some upgrades of HealthShare® Health Connect to fail. This only affects instances that are not licensed for the use of FHIR® and that have interoperability-enabled namespaces. Under these conditions, the upgrade fails with an error.

Product Alerts & Advisories

Advisory: AIX Memory Leak

In evaluating an IBM Support notification, InterSystems has determined a potential impact for our customers. The notification in question is:

Product Alerts & Advisories

Alert HS2024-limited: InterSystems IRIS for Health, Health Connect & HealthShare Solution Alert for Customers who Received an Ad Hoc Correction for HSIEO-8613

There is 1 alert in the HealthShare HS2024-limited Alert communication. An alert summary for the issue is shown is in the table below. Details for the alert are contained in the attached document: HS2024 Limited Communication.

Product Alerts & Advisories

Alert HS2024-02: Multiple InterSystems IRIS for Health, Health Connect & HealthShare Solution Alerts

There are 2 alerts in the HealthShare HS2024-02 Alert communication. An alert summary for each issue is shown is in the table below. Details for each alert are contained in the attached document: HS2024-02-Communication.

View All Alerts & Advisories

Sign Up Today

Receive notifications on support alerts, critical issues,
fixes, and product releases.

*Required Fields

Highlighted fields are required

First Name *

Last Name *

Email *

Company Name *

Country *

Please sign me up for the latest news and updates from InterSystems.**

*Required Fields

Highlighted fields are required

By submitting this form, you give consent to receive notifications concerning support alerts, critical issues, important updates, fixes, and product releases via email. In addition, you consent to your business contact information being entered into our CRM solution that is hosted in the United States, but maintained consistent with applicable data protection laws.
**By clicking here, you give consent to be contacted for news, updates and other marketing purposes related to existing and future InterSystems products, offerings, and events.