SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 58300: SAS® Web Infrastructure Platform Data Server has known security vulnerabilities (CVE-2015-5288, CVE-2015-5289, CVE-2016-0773)

DetailsAboutRate It

PostgreSQL 9.1, which is used as the underlying technology for SAS Web Infrastructure Platform Data Server, has known security vulnerabilities. For details, see the following documents:

Vulnerability Summary for CVE-2015-5288
Vulnerability Summary for CVE-2015-5289
Vulnerability Summary for CVE-2016-0773

SAS evaluates the risk that those security vulnerabilities might have on the version of PostgreSQL 9.1 that is provided by SAS.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Web Infrastructure Platform Data ServerMicrosoft® Windows® for x649.49.4_M49.4 TS1M09.4 TS1M4
Microsoft Windows 8 Enterprise x649.49.4_M49.4 TS1M09.4 TS1M4
Microsoft Windows 8 Pro x649.49.4_M49.4 TS1M09.4 TS1M4
Microsoft Windows 8.1 Enterprise 32-bit9.49.4_M49.4 TS1M09.4 TS1M4
Microsoft Windows 8.1 Enterprise x649.49.4_M49.4 TS1M09.4 TS1M4
Microsoft Windows 8.1 Pro 32-bit9.49.4_M49.4 TS1M09.4 TS1M4
Microsoft Windows 8.1 Pro x649.49.4_M49.4 TS1M09.4 TS1M4
Microsoft Windows 109.49.4_M49.4 TS1M09.4 TS1M4
Microsoft Windows Server 2008 R29.49.4_M49.4 TS1M09.4 TS1M4
Microsoft Windows Server 2008 for x649.49.4_M49.4 TS1M09.4 TS1M4
Microsoft Windows Server 2012 Datacenter9.49.4_M49.4 TS1M09.4 TS1M4
Microsoft Windows Server 2012 R2 Datacenter9.49.4_M49.4 TS1M09.4 TS1M4
Microsoft Windows Server 2012 R2 Std9.49.4_M49.4 TS1M09.4 TS1M4
Microsoft Windows Server 2012 Std9.49.4_M49.4 TS1M09.4 TS1M4
Windows 7 Enterprise x649.49.4_M49.4 TS1M09.4 TS1M4
Windows 7 Professional x649.49.4_M49.4 TS1M09.4 TS1M4
64-bit Enabled AIX9.49.4_M49.4 TS1M09.4 TS1M4
64-bit Enabled Solaris9.49.4_M49.4 TS1M09.4 TS1M4
HP-UX IPF9.49.4_M49.4 TS1M09.4 TS1M4
Linux for x649.49.4_M49.4 TS1M09.4 TS1M4
Solaris for x649.49.4_M49.4 TS1M09.4 TS1M4
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.