Recently, a serious vulnerability was discovered in the widely utilized open-source Log4j Java logging library used in several popular software packages, including IBM SPSS Statistics. This vulnerability affects all SPSS versions.
IT Services currently supports version 28.0.1 and is assisting all SPSS users as necessary to apply the required patches to mitigate the Log4j vulnerability.
Software on University workstations is managed by the Microsoft Intune device management platform. IT Services can automatically install the latest version of SPSS version 28.0.1 software and other important security patches. The ITS team is currently in process of remotely updating older versions of SPSS with the latest supported version and applicable patches. This process should be completed by the start of the Winter 2022 semester.
No additional action is required for those with corporate managed devices running Windows 10 or 11. Classroom and lab computers are included in the update as well.
Users on a campus computer that is not yet enrolled into the University’s device management program, can enroll their device by opening a ticket. Select "Join Windows 10 PC to Azure AD" in the Service Request Type within the required form field. Once enrolled, the SPSS update will be applied automatically.
Unfortunately, Microsoft Intune does not yet manage software on macOS devices. Mac users will need the following instructions to update to the latest version of SPSS is installed, with the required security patch.
If you are using an SPSS on your personal computer, or if your campus computer has not yet been enrolled in University’s device management system, take action immediately to protect your computer from being compromised.
Steps to address Log4j vulnerability on your Window 10 or 11 device:
- Check what version of SPSS is installed on your computer,
see the article Checking Version of SPSS
- If it is older than version 28.0.1, you will need to uninstall it,
see the article Uninstalling SPSS
- Install SPSS on your device if you still require it,
see the article Downloading and Installing IBM SPSS Statistics
- Apply the Log4j patch, see the article Applying Log4j Patch
Mac users will need following instructions to update to the latest version of SPSS is installed, with the required security patch.
Anyone requiring assistance with this update process should contact the IT Service Desk by submitting a ticket or call 519-253-3000 ext. 4440.