support.sas.com
 
 
support.sas.com


DataFlux Data Management Server 2.9

Hot Fix Downloads

* Important changes to Hot Fixes!

J6K001
DataFlux Data Management Server 2.9
Issue(s) Addressed:Introduced:
67117 DataFlux® Data Management Studio 2.9 and DataFlux® Data Management Server 2.9 are affected by the JQuery vulnerability described in CVE-2020-11022 J6K001
NOTE: Additional patches are required for DataFlux Secure. To obtain the DataFlux Secure patches, please contact SAS Technical Support and reference SAS Note 67117.
Windows Released: December 21, 2020     Documentation: J6K001wn.txt D       Download: J6K001wn.zip  
Windows for x64 Released: December 21, 2020     Documentation: J6K001x6.txt D       Download: J6K001x6.zip  
64-bit Enabled Solaris Released: December 21, 2020     Documentation: J6K001s6.txt D       Download: J6K001s6.tar.gz  
64-bit Enabled AIX Released: December 21, 2020     Documentation: J6K001r6.txt D       Download: J6K001r6.tar.gz  
HP-UX IPF Released: December 21, 2020     Documentation: J6K001hx.txt D       Download: J6K001hx.tar.gz  
Linux for x64 Released: December 21, 2020     Documentation: J6K001la.txt D       Download: J6K001la.tar.gz  
Solaris for x64 Released: December 21, 2020     Documentation: J6K001sx.txt D       Download: J6K001sx.tar.gz  
D indicates that the Documentation has special pre-installation, post-installation or other unique instructions not commonly used for hot fix deployment.
Top ^

J6K002
DataFlux Data Management Server 2.9
Issue(s) Addressed:Introduced:
67285 DataFlux® Data Management Studio 2.9 and DataFlux® Data Management Server 2.9 contain an Apache Tika component with known vulnerabilities J6K002
Windows Released: January 25, 2021     Documentation: J6K002wn.txt D       Download: J6K002wn.zip  
Windows for x64 Released: January 25, 2021     Documentation: J6K002x6.txt D       Download: J6K002x6.zip  
64-bit Enabled Solaris Released: January 25, 2021     Documentation: J6K002s6.txt D       Download: J6K002s6.tar.gz  
64-bit Enabled AIX Released: January 25, 2021     Documentation: J6K002r6.txt D       Download: J6K002r6.tar.gz  
HP-UX IPF Released: January 25, 2021     Documentation: J6K002hx.txt D       Download: J6K002hx.tar.gz  
Linux for x64 Released: January 25, 2021     Documentation: J6K002la.txt D       Download: J6K002la.tar.gz  
Solaris for x64 Released: January 25, 2021     Documentation: J6K002sx.txt D       Download: J6K002sx.tar.gz  
D indicates that the Documentation has special pre-installation, post-installation or other unique instructions not commonly used for hot fix deployment.
Top ^

J6K003
DataFlux Data Management Server 2.9
Issue(s) Addressed:Introduced:
67319 DataFlux® Data Management Server 2.9 REST APIs contain a cross-site request forgery (CSRF) vulnerability J6K003
NOTE: Additional patches are required for DataFlux Secure. To obtain the DataFlux Secure patches, please contact SAS Technical Support and reference SAS Note 67319.
Windows Released: January 28, 2021     Documentation: J6K003wn.txt D       Download: J6K003wn.zip  
Windows for x64 Released: January 28, 2021     Documentation: J6K003x6.txt D       Download: J6K003x6.zip  
64-bit Enabled Solaris Released: January 28, 2021     Documentation: J6K003s6.txt D       Download: J6K003s6.tar.gz  
64-bit Enabled AIX Released: January 28, 2021     Documentation: J6K003r6.txt D       Download: J6K003r6.tar.gz  
HP-UX IPF Released: January 28, 2021     Documentation: J6K003hx.txt D       Download: J6K003hx.tar.gz  
Linux for x64 Released: January 28, 2021     Documentation: J6K003la.txt D       Download: J6K003la.tar.gz  
Solaris for x64 Released: January 28, 2021     Documentation: J6K003sx.txt D       Download: J6K003sx.tar.gz  
D indicates that the Documentation has special pre-installation, post-installation or other unique instructions not commonly used for hot fix deployment.
Top ^




PLEASE CAREFULLY READ THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT ("AGREEMENT") BEFORE DOWNLOADING MATERIALS FROM THIS SITE. BY DOWNLOADING ANY MATERIALS FROM THIS SITE, YOU ARE AGREEING TO THESE TERMS.
You are downloading software code ("Code") which will become part of a product ("Software") you currently have licensed from SAS Institute Inc. or one of its subsidiaries ("the Institute"). this Code is designed to either correct an error in the Software or to add functionality to the Software. The code is governed by the same agreement which governs the Software. If you do not have an existing agreement with the Institute governing the Software, you may not download the Code.
SAS and all other SAS Institute Inc. product or service names are registered trademarks or trademarks of SAS Institute Inc. in the USA and other countries. ® indicates USA registration. Other brand and product names are registered trademarks or trademarks of their respective companies.

Copyright © 2021 SAS Institute Inc. All Rights Reserved.