SAS® Viya® 3.5 contains HDFS libraries with vulnerabilities


Severity: Critical

Description: SAS Viya 3.5 contains Hadoop Distributed File System (HDFS) libraries with known vulnerabilities. The vulnerabilities include, but are not limited to, the following:

Impacted files are on only LAX and AL6.

Potential Impact: Refer to the CVE record for details. 

Solution: A hot fix will update the HDFS libraries to version 1.14.4.2, which are not vulnerable.