Problem Note 61798: Known security vulnerabilities exist within the libpcre library that is used by SAS® software
 |  |  |  |  |
Severity: High
Potential Impact: Users might unknowingly execute malicious code.
Description: The third-party libpcre library that is used by SAS software has known security vulnerabilities.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| Product Family | Product | System | SAS Release | |
| Reported | Fixed* | |||
| SAS System | N/A | z/OS | 9.4 TS1M4 | |
| z/OS 64-bit | 9.4 TS1M4 | |||
| Android Operating System | 9.4 TS1M4 | |||
| Apple Mobile Operating System | 9.4 TS1M4 | |||
| Macintosh | 9.4 TS1M4 | |||
| Microsoft Windows 10 | 9.4 TS1M4 | |||
| Microsoft Windows 8 Enterprise 32-bit | 9.4 TS1M4 | |||
| Microsoft Windows 8 Enterprise x64 | 9.4 TS1M4 | |||
| Microsoft Windows 8 Pro 32-bit | 9.4 TS1M4 | |||
| Microsoft Windows 8 Pro x64 | 9.4 TS1M4 | |||
| Microsoft Windows Server 2008 R2 | 9.4 TS1M4 | |||
| Microsoft Windows Server 2012 R2 Datacenter | 9.4 TS1M4 | |||
| Microsoft Windows Server 2012 R2 Std | 9.4 TS1M4 | |||
| Microsoft® Windows® for x64 | 9.4 TS1M4 | |||
| Microsoft Windows 8.1 Enterprise 32-bit | 9.4 TS1M4 | |||
| Microsoft Windows 8.1 Enterprise x64 | 9.4 TS1M4 | |||
| Microsoft Windows 8.1 Pro 32-bit | 9.4 TS1M4 | |||
| Microsoft Windows 8.1 Pro x64 | 9.4 TS1M4 | |||
| Microsoft Windows Server 2008 | 9.4 TS1M4 | |||
| Microsoft Windows Server 2008 for x64 | 9.4 TS1M4 | |||
| Microsoft Windows Server 2012 Datacenter | 9.4 TS1M4 | |||
| Microsoft Windows Server 2012 Std | 9.4 TS1M4 | |||
| Windows 7 Enterprise 32 bit | 9.4 TS1M4 | |||
| Windows 7 Enterprise x64 | 9.4 TS1M4 | |||
| Windows 7 Home Premium 32 bit | 9.4 TS1M4 | |||
| Windows 7 Home Premium x64 | 9.4 TS1M4 | |||
| Windows 7 Professional 32 bit | 9.4 TS1M4 | |||
| Windows 7 Professional x64 | 9.4 TS1M4 | |||
| Windows 7 Ultimate 32 bit | 9.4 TS1M4 | |||
| Windows 7 Ultimate x64 | 9.4 TS1M4 | |||
| 64-bit Enabled AIX | 9.4 TS1M4 | |||
| 64-bit Enabled Solaris | 9.4 TS1M4 | |||
| HP-UX IPF | 9.4 TS1M4 | |||
| Linux for x64 | 9.4 TS1M4 | |||
| Solaris for x64 | 9.4 TS1M4 | |||
A fix for this issue for SAS Threaded Kernel Extensions for SAS Text Analytics 14.2 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/B9W.html#61798A fix for this issue for SAS Text Analytics for Greek 14.1 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/Y38.html#61798A fix for this issue for SAS Text Analytics 14.1 is available at:
http://ftp.sas.com/techsup/download/hotfix/HF2/C3M.html#61798A fix for this issue for SAS Threaded Kernel Extensions for SAS Text Analytics 13.2_M1 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/D2H.html#61798A fix for this issue for SAS Threaded Kernel Extensions for SAS Text Analytics 12.3_M1 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/D2G.html#61798| Type: | Problem Note |
| Priority: | high |
| Date Modified: | 2018-02-06 09:34:52 |
| Date Created: | 2018-02-01 13:50:21 |