SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 67506: SAS® Data Loader for Hadoop 3.1 includes a vulnerable third-party library

DetailsHotfixAboutRate It

Severity: High

Description: SAS Data Loader for Hadoop 3.1 includes a version of dojo (an NPM package) that has known vulnerabilities. Details about these vulnerabilities are available in the following CVE document:

Potential Impact: The impact varies. See the CVE details in the link that is listed above.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Data Loader for HadoopMicrosoft® Windows® for x643.19.4 TS1M4
Microsoft Windows 8 Enterprise 32-bit3.19.4 TS1M4
Microsoft Windows 8 Enterprise x643.19.4 TS1M4
Microsoft Windows 8 Pro 32-bit3.19.4 TS1M4
Microsoft Windows 8 Pro x643.19.4 TS1M4
Microsoft Windows 8.1 Enterprise 32-bit3.19.4 TS1M4
Microsoft Windows 8.1 Enterprise x643.19.4 TS1M4
Microsoft Windows 8.1 Pro 32-bit3.19.4 TS1M4
Microsoft Windows 8.1 Pro x643.19.4 TS1M4
Microsoft Windows 103.19.4 TS1M4
Microsoft Windows Server 20083.19.4 TS1M4
Microsoft Windows Server 2008 R23.19.4 TS1M4
Microsoft Windows Server 2008 for x643.19.4 TS1M4
Microsoft Windows Server 2012 Datacenter3.19.4 TS1M4
Microsoft Windows Server 2012 R2 Datacenter3.19.4 TS1M4
Microsoft Windows Server 2012 R2 Std3.19.4 TS1M4
Microsoft Windows Server 2012 Std3.19.4 TS1M4
Windows 7 Enterprise 32 bit3.19.4 TS1M4
Windows 7 Enterprise x643.19.4 TS1M4
Windows 7 Home Premium 32 bit3.19.4 TS1M4
Windows 7 Home Premium x643.19.4 TS1M4
Windows 7 Professional 32 bit3.19.4 TS1M4
Windows 7 Professional x643.19.4 TS1M4
Windows 7 Ultimate 32 bit3.19.4 TS1M4
Windows 7 Ultimate x643.19.4 TS1M4
64-bit Enabled AIX3.19.4 TS1M4
64-bit Enabled Solaris3.19.4 TS1M4
HP-UX IPF3.19.4 TS1M4
Linux for x643.19.4 TS1M4
Solaris for x643.19.4 TS1M4
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.