Predictive Solutions is actively responding to a remote code execution vulnerability detected in the Apache Log4j 2 Java library Log4Shell (or LogJam).

Following the IBM company whose products (IBM SPSS) are part of our company's solutions, we provide you with patches for IBM programs.

Manual for PS IMAGO PRO: 7.0, 8.0 and IBM SPSS Statsitics: 28, 27

Fixpack can be downloaded from the link below:

Fixpack for PS IMAGO PRO (8.0, 7.0) and IBM SPSS Statistics (27, 28)

The system will ask for a username and password, please provide the following authorization details:

User: user
Password: spss

Installation Guide

=================================

1. Affected products: SPSS Statistics client and server application

Version: 28, 27

Applies to platforms: ALL

2. Recommended actions:

Log4j update to version 2.15.0.

3. Files to download:

After downloading the link in the zip file, they find the fix that contains the following items:

log4j-core-2.15.0.jar

log4j-api-2.15.0.jar

log4j-1.2-api-2.15.0.jar

4. How to apply the fixpack.

(1) Close the Statistics application.

(2) Go to the PS IMAGO PRO / IBM SPSS Statistics installation directory.

The default location is:

- for PS IMAGO PRO

C: \ Program Files \ Predictive Solutions \ PS IMAGO PRO \ (version number) \ IBM \ SPSS \ Statistics \ (version number)

- for IBM SPSS Statistics

C: \ Program Files \ IBM \ SPSS \ Statistics \ (version number)

(3) Find files:

- log4j-core-2.13.3.jar,

- log4j-api-2.13.3.jar,

- log4j-1.2-api-2.13.3.jar,

which is in the installed directory and subfolder for:

Statistics 28 -> (/as-3.3.0.0/lib),

Statistics 27 -> (/as-3.2.3.0 / lib),

and then back up the files to a different folder such as the desktop.

(4)  For IBM SPSS Statistics 27 only -> Find log4j-1.2.17.jar, which is in the subfolder (\ common \ ext \ bin \ spss.cognos.9), then back up to another folder for example on the desktop.

(5) Copy the patch files to the mentioned folders:

- log4j-core-2.15.0.jar,

- log4j-api-2.15.0.jar,

- log4j-1.2-api-2.15.0.jar

5. MacOS operating system.

(1) Close the Statistics application.

(2) Change to the Statistics installation directory.

(3) Locate the files:

- log4j-core-2.13.3.jar,

- log4j-api-2.13.3.jar,

- log4j-1.2-api-2.13.3.jar,

which are located in the subfolder:

for IBM SPSS Statistics 27 -> (SPSS Statistics.app/Contents/bin & SPSS Statistics.app/Contents/bin/as-3.2.3.0/lib),

for IBM SPSS Statistics 28 -> (SPSS Statistics.app/Contents/bin & SPSS Statistics.app/Contents/bin/as-3.3.0.0/lib),

and then back up to another folder such as the desktop.

(4) For IBM SPSS Statistics 27 only -> Find log4j-1.2.17.jar which is located in the subfolder (SPSS Statistics.app/Contents/common/ext/bin/spss.cognos.9) and then execute backup to a different folder, such as the desktop.

(5) Copy the interim fix log4j-core-2.15.0.jar, log4j-api-2.15.0.jar, log4j-1.2-api-2.15.0.jar to the previous folders.

6. After replacing the JAR files, IBM SPSS Statistics is now safe and ready to use.