Predictive Solutions is actively responding to a remote code execution vulnerability detected in the Apache Log4j 2 Java library Log4Shell (or LogJam).

Following the IBM company whose products (IBM SPSS) are part of our company's solutions, we provide you with patches for IBM programs.

Manual for PS IMAGO PRO: 7.0, 8.0 and IBM SPSS Statsitics: 27, 28

Log4J patch version: 2.17.1

Fixpack can be downloaded from the link below:

Fixpack for PS IMAGO PRO (7.0, 8.0) and IBM SPSS Statistics (27, 28)

The system will ask for a username and password, please provide the following authorization details:

User: user
Password: spss

===============

Installation instructions

===============

1. Products affected: Statistics Desktop & Server 
    Platforms affected: ALL

2. How to apply the hot fix:

Windows:

   (1) Close the IBM SPSS Statistics application.

   (2) Navigate to the IBM SPSS Statistics installation directory (e.g. C:\Program Files\IBM\SPSS\Statistics\Version or C:\Program Files\IBM\SPSS Statistics or C:\Program Files\Predictive Solutions\PS IMAGO PRO\Version\IBM\SPSS\Statistics\Version).

   (3) Locate the following files and remove them to a backup location outside of the Statistics install path:

    For IBM SPSS Statistics 27 or PS IMAGO PRO 7.0:

         $SPSS_HOME/log4j-core-2.13.3.jar
         $SPSS_HOME/log4j-api-2.13.3.jar
         $SPSS_HOME/log4j-1.2-api-2.13.3.jar
         $SPSS_HOME/as-3.2.3.0/lib/log4j-core-2.13.3.jar
         $SPSS_HOME/as-3.2.3.0/lib/log4j-api-2.13.3.jar
         $SPSS_HOME/common/ext/bin/spss.cognos.9/log4j-1.2.17.jar

    For IBM SPSS Statistics 28 or PS IMAGO PRO 8.0:

         $SPSS_HOME/log4j-core-2.13.3.jar
         $SPSS_HOME/log4j-api-2.13.3.jar
         $SPSS_HOME/log4j-1.2-api-2.13.3.jar
         $SPSS_HOME/as-3.3.0.0/lib/log4j-1.2-api-2.13.3.jar
         $SPSS_HOME/as-3.3.0.0/lib/log4j-core-2.13.3.jar
         $SPSS_HOME/as-3.3.0.0/lib/log4j-api-2.13.3.jar

   (4) Copy the interim fix files (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) to these locations:

    For IBM SPSS Statistics 27 or PS IMAGO PRO 7.0:

         $SPSS_HOME/
         $SPSS_HOME/as-3.2.3.0/lib/
         $SPSS_HOME/common/ext/bin/spss.cognos.9/

    For IBM SPSS Statistics 28 or PS IMAGO PRO 8.0:

         $SPSS_HOME/
         $SPSS_HOME/as-3.3.0.0/lib/

MacOS:

   (1) Close the IBM SPSS Statistics application.

   (2) Navigate to the IBM SPSS Statistics:

       - 27.0.1.0 installation directory (e.g. $SPSS_HOME or '/Applications/IBM SPSS Statistics 27/').

       - 28.0.1.0 installation directory (e.g. $SPSS_HOME or '/Applications/IBM SPSS Statistics/').

   (3) Locate the following files and remove them to a backup location outside of the Statistics install path:

    For IBM SPSS Statistics 27

         $SPSS_HOME/SPSS Statistics.app/Contents/bin/log4j-core-2.13.3.jar
         $SPSS_HOME/SPSS Statistics.app/Contents/bin/log4j-api-2.13.3.jar
         $SPSS_HOME/SPSS Statistics.app/Contents/bin/log4j-1.2-api-2.13.3.jar
         $SPSS_HOME/SPSS Statistics.app/Contents/bin/as-3.2.3.0/lib/log4j-core-2.13.3.jar
         $SPSS_HOME/SPSS Statistics.app/Contents/bin/as-3.2.3.0/lib/log4j-api-2.13.3.jar
         $SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.cognos.9/log4j-1.2.17.jar
         $SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.tm1.9/log4j-1.2.16.jar

    For IBM SPSS Statistics 28

         $SPSS_HOME/SPSS Statistics.app/Contents/bin/log4j-core-2.13.3.jar
         $SPSS_HOME/SPSS Statistics.app/Contents/bin/log4j-api-2.13.3.jar
         $SPSS_HOME/SPSS Statistics.app/Contents/bin/log4j-1.2-api-2.13.3.jar
         $SPSS_HOME/SPSS Statistics.app/Contents/bin/as-3.3.0.0/lib/log4j-1.2-api-2.13.3.jar
         $SPSS_HOME/SPSS Statistics.app/Contents/bin/as-3.3.0.0/lib/log4j-core-2.13.3.jar
         $SPSS_HOME/SPSS Statistics.app/Contents/bin/as-3.3.0.0/lib/log4j-api-2.13.3.jar
         $SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.cognos.9/log4j-core-2.13.3.jar
         $SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.cognos.9/log4j-api-2.13.3.jar

   (4) Copy the interim fix files (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) to these locations:

    For IBM SPSS Statistics 27

         $SPSS_HOME/SPSS Statistics.app/Contents/bin/
         $SPSS_HOME/SPSS Statistics.app/Contents/bin/as-3.2.3.0/lib/
         $SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.cognos.9/
         $SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.tm1.9/

    For IBM SPSS Statistics 28

         $SPSS_HOME/SPSS Statistics.app/Contents/bin/
         $SPSS_HOME/SPSS Statistics.app/Contents/bin/as-3.3.0.0/lib/
         $SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.cognos.9/


3. IBM SPSS Statistics is now ready to be used.