Update on 12/16/2021 for Log4j Vulnerability in SAS Software: The Vendor’s recommendation is to take manual steps to remove the jndilookup class. Documentation is here: SAS Help Center: SAS 9.4 (M7 and M6) SAS has an External Tech Support Bulletin page that can be monitored for future SAS updates on Log4j. It is not expected that vulnerability scanners will be able to show that this remediation has been applied.
SAS is available for download and installation by authorized users and their IT support personnel. Please note that SAS is not licensed enterprise-wide in the USGS. The Office of Enterprise Information has purchased SAS maintenance for a number of licenses, which are allocated to USGS users. Send an email to GS Help SAS if you need information on obtaining a SAS license.
Support
SAS is supported by GS Help SAS. See also:
Licensed users may also contact SAS directly for problem resolution:
Site Name: US GEOLOGICAL SURVEY
Tech Support Site Number: 70023047
Contracts Site Number: 413920