SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 62068: PostgreSQL security concerns exist in SAS® Data Server 9.4.13, which is delivered with SAS® Viya® 3.3

DetailsHotfixAboutRate It

Severity: High

Description: SAS data server 9.4.13, which functions as a PostgreSQL database, is delivered with SAS Viya 3.3. The following security concerns related to PostgreSQL are present in this release of the SAS data server:

Potential Impact: These security concerns have the following impact:

  • Might allow unauthorized disclosure of information
  • Might allow unauthorized modification
  • Might allow disruption of service

To circumvent these security concerns, upgrade to SAS data server 9.4.17.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS ViyaMicrosoft® Windows® for x643.33.4
Microsoft Windows 8 Enterprise 32-bit3.33.4
Microsoft Windows 8 Enterprise x643.33.4
Microsoft Windows 8 Pro 32-bit3.33.4
Microsoft Windows 8 Pro x643.33.4
Microsoft Windows 8.1 Enterprise 32-bit3.33.4
Microsoft Windows 8.1 Enterprise x643.33.4
Microsoft Windows 8.1 Pro 32-bit3.33.4
Microsoft Windows 8.1 Pro x643.33.4
Microsoft Windows 103.33.4
Microsoft Windows 95/983.33.4
Microsoft Windows 2000 Advanced Server3.33.4
Microsoft Windows 2000 Datacenter Server3.33.4
Microsoft Windows 2000 Server3.33.4
Microsoft Windows 2000 Professional3.33.4
Microsoft Windows NT Workstation3.33.4
Microsoft Windows Server 2003 Datacenter Edition3.33.4
Microsoft Windows Server 2003 Enterprise Edition3.33.4
Microsoft Windows Server 2003 Standard Edition3.33.4
Microsoft Windows Server 2003 for x643.33.4
Microsoft Windows Server 20083.33.4
Microsoft Windows Server 2008 R23.33.4
Microsoft Windows Server 2008 for x643.33.4
Microsoft Windows Server 2012 Datacenter3.33.4
Microsoft Windows Server 2012 R2 Datacenter3.33.4
Microsoft Windows Server 2012 R2 Std3.33.4
Microsoft Windows Server 2012 Std3.33.4
Microsoft Windows Server 20163.33.4
Microsoft Windows XP Professional3.33.4
Windows 7 Enterprise 32 bit3.33.4
Windows 7 Enterprise x643.33.4
Windows 7 Home Premium 32 bit3.33.4
Windows 7 Home Premium x643.33.4
Windows 7 Professional 32 bit3.33.4
Windows 7 Professional x643.33.4
Windows 7 Ultimate 32 bit3.33.4
Windows 7 Ultimate x643.33.4
Windows Millennium Edition (Me)3.33.4
Windows Vista3.33.4
Windows Vista for x643.33.4
Linux for x643.33.4
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.