SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 69401: SAS® Web Server contains a version of OpenSSL with a known vulnerability that is described in CVE-2022-2068

DetailsHotfixAboutRate It

Severity: Critical

Description: SAS Web Server contains a version of OpenSSL that is affected by the vulnerability described by CVE-2022-2068.

Potential Impact: Refer to CVE record listed in the previous section for details.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Web ServerMicrosoft® Windows® for x649.459.4 TS1M6
64-bit Enabled AIX9.459.4 TS1M6
64-bit Enabled Solaris9.459.4 TS1M6
HP-UX IPF9.459.4 TS1M6
Linux for x649.459.4 TS1M6
Solaris for x649.459.4 TS1M6
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.