Updates on log4j Remote Code Execution Vulnerability (CVE-2021-44228) - Page 2

SAS_TS_ChrisD · Posted 01-05-2022 04:39 PM

Most recent update:

1-5-2022 (5:00 PM EST) - Guidance for handling third-party scan results after removing the JndiLookup class; detailed evaluations and recommendations for SAS® Enterprise Session Monitor; recommendations for additional versions of SAS® Merchandise Planning

SAS_TS_Rayna · Posted 01-06-2022 05:20 PM

Most recent update:

1-6-2022 (5:00 PM EST) - Guidance for SAS® Viya 2020.1 and later deployments containing Open Distro for Elasticsearch; updated recommendations for SAS® Anti-Money Laundering, SAS® Customer Due Diligence, and SAS® Life Science Analytics Framework

SAS_TS_ChrisD · Posted 01-07-2022 03:21 PM

Most recent update:

1-7-2022 (4:00 PM EST) - Updated recommendations for SAS® Data Management Studio and SAS® Data Management Server

SAS_TS_ChrisD · Posted 01-10-2022 03:51 PM

Most recent update:

1-10-2022 (4:00 PM EST) - Plans for updating to Log4j 2.17.1+ in SAS® 9.4M6 (TS1M6); updated recommendations for SAS® Anti-Money Laundering, SAS® Customer Due Diligence, and SAS® Enterprise GRC

SAS_TS_Rayna · Posted 01-11-2022 04:40 PM

Most recent update:

1-11-2022 (5:00 PM EST) - Guidance for deployments that provide access from Base SAS® to Hadoop; updated recommendations for SAS® Visual Investigator; detailed evaluations and recommendations for SAS® Data Loader for Hadoop, SAS® Scalable Performance Data Engine, and SAS/ACCESS®

SAS_TS_ChrisD · Posted 01-13-2022 04:32 PM

Most recent updates:

1-13-2022 (5:00 PM EST) – Addition of Log4j 2.17.1+ delivery dates for SAS® 9.4M6, SAS® 9.4M7, and SAS® Viya® 3.4; clarified information regarding elimination of Log4j version 1 with the SAS® 9.4M8 release; addition of links to SAS Notes for SAS® 9.4, SAS® Viya®3.4, and SAS® Viya®3.5; updated recommendations for SAS® Business Orchestration Services, SAS® Grid Manager, SAS® Scalable Performance Data Engine, and JMP® products

SAS_TS_Rayna · Posted 01-14-2022 04:40 PM

Most recent updates:

01-14-2022 (5:00 PM EST) – Removal of product-specific steps for SAS® Visual Investigator that were referenced in the recommendations for other products and solutions; updated recommendations for SAS® Enterprise Session Monitor and SAS® Risk Management Solutions (SAS Viya)

SAS_TS_ChrisD · Posted 01-18-2022 04:31 PM

Most recent update:

1-18-2022 (5:00 PM EST) – Updated guidance and recommendations for SAS® Viya® 2020.1 and later (given the release of SAS® Viya® 2021.2.3 on January 19, 2022)