SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 56481: OpenSSL vulnerabilities exist in the SAS® 9.4 Web Server (OpenSSL advisories through 9th July 2015)

DetailsHotfixAboutRate It

SAS 9.4 Web Server includes OpenSSL 1.0.1j and earlier (dependent on the maintenance level of your SAS 9.4 software). These versions of OpenSSL contain security vulnerabilities, which are described in OpenSSL security advisories through 9th July 2015 at openssl.org/news/vulnerabilities.html.

Note: SAS 9.4 Web Server is part of the SAS® 9.4 Integration Technologies middle tier. The web server is included with SAS® BI Server, SAS® Enterprise BI Server, SAS® Visual Analytics, and any SAS® solution that includes a middle tier.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Web ServerMicrosoft® Windows® for x649.49.4 TS1M0
64-bit Enabled AIX9.49.4 TS1M0
64-bit Enabled Solaris9.49.4 TS1M0
HP-UX IPF9.49.4 TS1M0
Linux for x649.49.4 TS1M0
Solaris for x649.49.4 TS1M0
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.