Updates on log4j Remote Code Execution Vulnerability (CVE-2021-44228)

[SAS_TS_Rayna]

2-24-2022 – Updated statement regarding completion of delivery of patches for SAS® Viya® 2020.1 and later; updated recommendations for SAS® Risk Management Solutions on SAS® Viya® regarding Apache Solr

Read the full bulletin.

[SAS_TS_ChrisD]

3-3-2022 – Updated statement regarding completion of delivery of patches for SAS® Viya® 3.4

Read the full bulletin.

[SAS_TS_Rayna]

3-10-2022 – Updated statement regarding recommendation for SAS® Viya® 2020.1 and later; added links to SAS Help Center for update steps for SAS® Viya® 2020.1 and later, SAS® Viya® 3.5, and SAS® Viya® 3.4

Read the full bulletin.

[SAS_TS_Rayna]

3-11-2022 – Updated statement regarding recommendations for SAS® Viya® 3.5 and SAS® Viya® 3.4. Read the full bulletin.

[SAS_TS_ChrisD]

3-31-2022– Updated measures and recommendations for SAS® 9.4, given the release of security updates for SAS® 9.4M6 (TS1M6) and SAS® 9.4M7 (TS1M7) on March 31, 2022; updated recommendations for SAS® Fraud Management

Read the full bulletin.

[SAS_TS_Rayna]

5-5-2022 – Updated statements regarding SAS® Life Science Analytics Framework

Read the full bulletin.

[SAS_TS_Rayna]

9-22-2022 – Updated statements regarding SAS® Viya® 3.5 and SAS® Viya® 3.4

See the full bulletin: https://support.sas.com/content/support/en/security-bulletins/remote-code-execution-vulnerability-cv...