Turbo FRMAC 11.0.2 (2021)

100956 Log4J2 Vulnerability in TF v11.0.1

A new vulnerability was discovered in Log4J since the release of Log4J v2.16.0. We have since replaced the Log4J library with version 2.17.1, which fixes all known vulnerabilities for Log4J to date.

Turbo FRMAC 11.0.1 (2021)

100801 Log4J2 Vulnerability in Turbo FRMAC 11.0

Installed Log4J library updates, log4j-core-2.16.0.jar and log4j-api-2.16.0.jar, to fix critical vulnerability.

A critical vulnerability was discovered in the Log4J library. The likelihood of this vulnerability being exploited in this application is very low. However, this library existed in the codebase and has been replaced with the patched version issued by Apache. Read further for more details.

Log4J is an open-source logging library used by apps and services across the Internet. Logging is a process where applications keep a running list of activities they have performed, which can later be reviewed in case of error.

The vulnerability is designated as CVE-2021-44228. The vulnerability allows remote attackers to gain control over vulnerable targets. To perform remote code execution, an attacker only needs to send a simple malicious request that contains a formatted string. This formatted string is then picked up by the Log4J library and executed. The result is an attacker's ability to cause Log4j to connect to a service controlled by the attacker to download and execute arbitrary code (likely malicious).

Turbo FRMAC 11.0 (2021)

99762 Implement Analytical Action Levels calculation

Added new Analytical Action Levels calculation based on FRMAC Assessment Manual, Volume 1, Table 4.4-1. This calculation computes Analytical Action Levels using previously-created Public Protection DRL and Ingestion calculations. The new calculation also includes a feature to export the results in a format that can be uploaded to RadResponder by Laboratory Analysis.

44348 Add Building Protection Factors and Occupancy Factors to Worker Protection calculations

Added the Building Protection Factors input panel and the Occupancy Factors input panel to all Worker Protection calculations. Updated the Worker Protection calculations to use these factors.

25405 Allow user to select Imperial or Metric units and date/time formatting

Added ability for user to define how to display units (Imperial or Metric) and format dates and numbers throughout the software. This is particularly useful for international users.

44349 Add the Input Report and Briefing Product buttons to the Worker Protection DRL calculation

Added the Input Report and Briefing Product to the Worker Protection DRL calculation to make it consistent with the Public Protection DRL calculation.

44347 Implement Worker Protection Stay Time calculation

Added new Worker Protection Stay Time calculation. This calculation corresponds to Method 2.1.2 in FRMAC Assessment Manual, Volume 1.

44048 Implement Projecting Contamination Levels in Food calculations

Added three new calculations for projecting contamination in crops, meat, and milk. These calculations correspond to Method 3.6 in FRMAC Assessment Manual, Volume 1.

100075 Add ability to remove FDA Grouped radionuclides from mixture

Added ability to include or exclude any of the FDA Grouped radionuclides from a mixture in Ingestion calculations that use FDA Derived Intervention Levels. This gives users more control over reported results, especially for the new Analytical Action Levels calculation.

44345 Remove multiple dose limits, allow adding Time Phases to Worker Protection calculations

Changed the Dose Limits input from four limits to a single dose limit input and updated the Time Settings input to allow user to add Time Phases. These changes were implemented across all Worker Protection calculations where appropriate and give users more control over reported results, as well as reduces potential user error associated with reporting results for several dose limits at once.

44189 Noble gas daughter deposition velocity incorrectly zero in PAG Emulation Mode

Fixed bug in 1992 EPA PAG Emulation Mode for Public Protection DRL calculations where daughter radionuclides were sometimes assigned incorrect deposition velocities.

25218 Convert Turbo FRMAC to Java 11

Updated Turbo FRMAC to build and run under Java 11.

44047 Remove Hold Time from Ingestion Dose calculations

Removed the Hold Time input from the Solid and Liquid Food Ingestion Dose calculations to be consistent with changes to Method 3.5 in FRMAC Assessment Manual, Volume 1. This removes the decay adjustment from the time between sample evaluation and consumption under the assumption that the level of contamination in the food is at the time the food enters commerce.

44351 Change Fraction of Food Contaminated defaults in Ingestion Dose calculations to 1.0

Changed the "Fraction of Food Contaminated" defaults to 1.0 in the Solid and Liquid Food Ingestion Dose calculations. This change is consistent with the default value specified in Appendix C, Table 11 of FRMAC Assessment Manual, Volume 1.

16556 Provide two Particle Size Distribution inputs for Plume Inhalation and Resuspension Inhalation

Updated all calculations to allow defining two Particle Size Distributions (PSD), one for Plume Inhalation and one for Resuspension Inhalation. This gives users the flexibility to use incident-specific PSD information for the respective exposure pathways. For example, a user might have a modeled-informed PSD for the plume, but still use the default 1-µm assumption for resuspension.

44346 Add Dose Parameter results to Worker Protection calculations

Added the Dose Parameters button to all Worker Protection calculations that use dose parameters. Note that the displayed dose parameters are modified by the Assigned Protection Factor (APF) for respiratory protection and Potassium Iodide Protection Factor (KIPF) where appropriate. The ability to view dose parameters is useful for understanding which exposure pathways and radionuclides are contributing the most to total dose.

99139 Change the Worker Protection default Breathing Rates Panel to reflect Light Exercise

Changed the Worker Protection Breathing Rates panel default input for activity time for Adult Light Exercise to 24 hours so that Activity-Averaged Breathing Rate reflects the default Worker Protection assumption of Light Exercise. Note, this calculation was previously correctly using Light Exercise Breathing Rate for Activity-Averaged but it was not reflected in the GUI, so this change makes this assumption more clear to the user.

SAND2023-03271W