
(For the M0, M1, M2, M3, M4, and M5 maintenance releases of SAS 9.4, no platform-level mitigation is needed.) Note: As of March 31st, 2022, visit (See ) for the current migitation instructions for SAS 9.4M6 and SAS 9.4M7. Repetition is necessary to ensure that installation activities do not reintroduce vulnerabilities. These instructions were modified from the Original SAS Instructions on their response.Įach time you perform a SAS installation activity (such as upgrading, updating, hot fixing, or adding software), repeat this process. The instructions in this kb will help you implement the guidance that is provided in SAS Security Bulletin: Remote Code Execution Vulnerability (CVE-2021-44228) SAS has a Remote Code Execution Vulnerability that was identified December 2021.
How do I patch SAS 9.4 from the Log4j Vulnerability?.
If your deployment includes one or more Business Intelligence, Data Integration, or solution products and is metadata-based, you might be able to use the SAS Migration Utility. For browser support, refer to Third-Party Software Requirements. SAS® 9.4 TS1M7 and higher is supported on Windows 11. Current SAS 9.4 customers can request SAS 9.4 maintenance by visiting the Maintenance Release Announcement page and using the self-service application for maintenance tool.ĭetails of Supported Operating Systems were found using the above criteria. If you are new to SAS, complete the standard contact form. SAS 9.4 M8 was released on January 31, 2023. SAS ® 9.4 TS1M8 (9.4 M8) is the current release SAS® 9.4 TS1M7 and higher is supported on Windows Server 2022. SAS® 9.4 TS1M6 and higher is supported on Windows Server 2019. SAS® 9.4 TS1M5 and higher is supported on Windows Server 2016. SAS® 9.4 TS1M3 and higher is supported on Windows 10. Your selection details will appear below when you click Submit.