Security updates for SAS® Infrastructure Data Server and PostgreSQL ODBC drivers for SAS® Viya® 3.5


Severity: High

Description: SAS Infrastructure Data Server and PostgreSQL ODBC drivers for SAS Viya 3.5 contain the following security vulnerabilities of PostgreSQL:

Potential Impact: The impact might vary depending on the vulnerabilities. For more information, see the CVEs.

Solution: The latest software update for SAS Viya 3.5 will update the PostgreSQL libraries to version 15.14, which is not vulnerable to the CVEs above.