Is there any update on a fix for CVE-2024-50379?  I also see vulns (regarding SAS version of Tomcat) for CVE-2024-54677 and CVE-2024-52316 ... View more

In theory, yes. The documentation for XCMD option says that "it can be restricted by the administor" meaning, this option is compatible with Restriction options at SAS Foundation level.   https://go.documentation.sas.com/?cdcId=pgmsascdc&cdcVersion=9.4_3.4&docsetId=hostunx&docsetTarget=n02699r064oqccn19vblte8xzr8m.htm&locale=en   $SASROOT/misc/rstropts/groups   the restriction applies selectively upon the SAS session owner account's login or - better - primary group.   the admin creates a specific SASV9.cfg file in the directory below with the option values set accordingly   <primary group>_rsasv.cfg     -XCMD   -this file will take precedence over any SASV9.cfg file globally applied -if the option value (not the case, here) can also be changed during the sas session, the restriction applies and the change is refused   Never tested. I am suprised this very option is compatible with restriction since it applies only for IOM server sessions.  ... View more

It would be worth a (great) SAS Paper for a Forum, @SimonDawson  Kudos for you. ... View more

Download the file to your PC and then open it. ... View more

@SASKiwi wrote: @Kurt_Bremser Looks like the OP is using ODS to create a CVS using PROC PRINT. In my experience ODS is a resource hog when writing out large files. I bet a simple PROC EXPORT using DBMS = CSV would be hugely faster. In German-speaking countries, we call this "carrying the church around the cross". Using ODS which creates lots of formatting, just to completely lose that in the csv is - ahhh - well, I'm in a civil mood today, so I won't write it here. @gothaggis if this is actually the case and you just wanted to avoid the 10 minutes of work it takes to write the data step (or even simpler: the proc export) for a csv export, let this be an object lesson in "do not take shortcuts". And have a look at Maxim 14. ... View more

Hi @gothaggis, would you take a moment to suggest this as a product-improvement idea on the SASware Ballot? https://communities.sas.com/t5/SASware-Ballot-Ideas/idb-p/sas_ideas  Others who'd like this feature can upvote it and comment. Thank you for being part of our communties! ... View more