Reference Name: SAS Security Update for SAS® 9.4M6 (TS1M6)
Severity: Critical
History
3-31-2024 - New release available
3-31-2022 - New release available
2-16-2021 - New release available
11-19-2019 - New release available
9-17-2019 – New release available
3-11-2019 – New release available
11-20-2018 – SAS security update available
Description
The SAS security update for SAS 9.4M6 is a software update that addresses multiple third-party security vulnerabilities within the SAS product suite. Security updates are cumulative. Only the most recent update needs to be applied.
Solution
See SAS Security Updates and Hot Fixes to access the download and documentation for the SAS security update for SAS 9.4M6.
Vulnerabilities Addressed in the 3-31-2024 Release
Vulnerabilities Addressed in the 3-31-2022 Release
Vulnerabilities Addressed in the 2-16-2021 Release
Vulnerabilities Addressed in the 11-19-2019 Release
CVE-2019-5427
CVE-2019-12814
CVE-2019-12384
CVE-2019-12086
CVE-2019-10173
CVE-2018-20433
CVE-2018-19362
CVE-2018-19361
CVE-2018-19360
CVE-2018-14720
CVE-2018-14719
CVE-2018-1339
CVE-2018-1338
CVE-2018-1335
CVE-2018-1257
CVE-2018-12023
CVE-2018-12022
CVE-2018-11796
CVE-2018-11762
CVE-2018-11761
CVE-2018-11307
CVE-2018-11039
CVE-2018-1000873
CVE-2017-7957
CVE-2016-6814
CVE-2016-6809
CVE-2016-3674
CVE-2015-5211
CVE-2015-3253
CVE-2014-3625
CVE-2014-1904
CVE-2014-0225
CVE-2013-7315
CVE-2013-7285
CVE-2013-6429
CVE-2013-4152
CVE-2011-2894
CVE-2011-2732
Vulnerabilities Addressed in the 9-17-2019 Release
The 9-17-2019 release removes unused Apache Struts libraries from the SAS deployment, which might contain known vulnerabilities.
Vulnerabilities Addressed in the 3-11-2019 Release
Vulnerabilities Addressed in the 11-20-2018 Release
CVE-2018-1313
CVE-2018-1335
CVE-2018-1338
CVE-2018-1339
CVE-2018-1304
CVE-2018-8014
CVE-2018-1305
CVE-2018-0881
CVE-2018-2938
CVE-2017-5647
CVE-2017-6056
CVE-2017-15706
CVE-2017-16853
CVE-2016-3088
CVE-2016-0734
CVE-2016-6814
CVE-2016-6810
CVE-2016-0782
CVE-2016-6809
CVE-2016-1181
CVE-2016-1182
CVE-2016-4003
CVE-2016-0706
CVE-2016-0714
CVE-2016-0762
CVE-2016-0763
CVE-2016-1240
CVE-2016-3092
CVE-2016-5018
CVE-2016-5388
CVE-2016-6794
CVE-2016-6796
CVE-2016-6797
CVE-2016-6816
CVE-2016-8735
CVE-2016-8745
CVE-2016-9774
CVE-2016-9775
CVE-2015-1832
CVE-2015-3253
CVE-2015-1169
CVE-2015-0899
CVE-2015-5169
CVE-2015-5174
CVE-2015-5345
CVE-2015-5346
CVE-2015-5351
CVE-2015-1796
CVE-2014-0094
CVE-2014-0112
CVE-2014-0113
CVE-2014-0114
CVE-2014-0033
CVE-2014-0050
CVE-2014-0075
CVE-2014-0096
CVE-2014-0099
CVE-2014-0119
CVE-2014-0227
CVE-2014-0230
CVE-2014-7810
CVE-2013-1880
CVE-2013-1879
CVE-2013-3617
CVE-2013-1965
CVE-2013-1966
CVE-2013-2134
CVE-2013-2135
CVE-2013-1571
CVE-2013-2067
CVE-2013-2071
CVE-2013-2185
CVE-2013-4286
CVE-2013-4322
CVE-2013-4444
CVE-2013-4590
CVE-2012-0391
CVE-2012-0392
CVE-2012-0393
CVE-2012-0394
CVE-2012-1007
CVE-2012-2733
CVE-2012-3544
CVE-2012-3546
CVE-2012-4431
CVE-2012-4534
CVE-2012-5568
CVE-2012-5885
CVE-2012-5886
CVE-2012-5887
CVE-2012-0881
CVE-2011-5057
CVE-2011-4461
CVE-2009-2625
CVE-2009-1523