1. Technology Services
2. askIT
3. Research Math Science
4. SPSS
5. SPSS Interim Fix Installation Guide

Interim Fix Installation Guide

This interim fix installation guide will instruct you in how to apply the interim fix addressing the Apache Log4j CVE-2021-44228 vulnerability in IBM SPSS Statistics. Please find your product version below:

• SPSS28
• SPSS27
  
  • Windows
  • macOS
  • Linux
• SPSS26
  
  • Windows
  • macOS
  • Linux

SPSS 28

The Interim Fix for SPSS 28 has been incorporated into Fix Pack version 28.0.1.1 available at Update/Support/R.

SPSS 27

Windows

1. Download the Interim Fix ZIP file.
2. Right-click the ZIP file and select Extract All to extract the files to a temporary location.
3. Ensure SPSS 27.0.1.0 is not currently running.
4. Open File Explorer and navigate to the SPSS 27.0.1.0 installation directory (e.g. 'C:\Program Files\IBM\SPSS Statistics\').
5. Locate the following files, copy them to a backup location outside of the SPSS installation directory, then delete the originals:
   C:\Program Files\IBM\SPSS Statistics\log4j-core-2.13.3.jar
   C:\Program Files\IBM\SPSS Statistics\log4j-api-2.13.3.jar
   C:\Program Files\IBM\SPSS Statistics\log4j-1.2-api-2.13.3.jar
   C:\Program Files\IBM\SPSS Statistics\as-3.2.3.0\lib\log4j-core-2.13.3.jar
   C:\Program Files\IBM\SPSS Statistics\as-3.2.3.0\lib\log4j-api-2.13.3.jar
   C:\Program Files\IBM\SPSS Statistics\common\ext\bin\spss.cognos.9\log4j-1.2.17.jar
6. Copy the interim fix files that you extracted (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) and paste them to these locations:
   C:\Program Files\IBM\SPSS Statistics\
   C:\Program Files\IBM\SPSS Statistics\as-3.2.3.0\lib\
   C:\Program Files\IBM\SPSS Statistics\common\ext\bin\spss.cognos.9\

macOS

1. Download the Interim Fix ZIP file.
2. Click the ZIP file to extract the interim fix files.
3. Close the Statistics 27.0.1.0 application.
4. Open Finder and navigate to the Statistics 27.0.1.0  installation directory (e.g. $SPSS_HOME or '/Applications/IBM SPSS Statistics 27').
5. Locate the following files, copy them to a backup location outside of the SPSS installation directory, then delete the originals. To navigate inside of the SPSS Statistics.app, right-click the file and select Show Package Contents:
   $SPSS_HOME/SPSS Statistics.app/Contents/bin/log4j-core-2.13.3.jar
   $SPSS_HOME/SPSS Statistics.app/Contents/bin/log4j-api-2.13.3.jar
   $SPSS_HOME/SPSS Statistics.app/Contents/bin/log4j-1.2-api-2.13.3.jar
   $SPSS_HOME/SPSS Statistics.app/Contents/bin/as-3.2.3.0/lib/log4j-core-2.13.3.jar
   $SPSS_HOME/SPSS Statistics.app/Contents/bin/as-3.2.3.0/lib/log4j-api-2.13.3.jar
   $SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.cognos.9/log4j-1.2.17.jar
   $SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.tm1.9/log4j-1.2.16.jar
6. Copy the interim fix files (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) to these locations:
   $SPSS_HOME/SPSS Statistics.app/Contents/bin/
   $SPSS_HOME/SPSS Statistics.app/Contents/bin/as-3.2.3.0/lib/
   $SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.cognos.9/
   $SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.tm1.9/

Linux

1. Download the Interim Fix ZIP file.
2. Extract the interim fix files.
3. Close the Statistics 27.0.1.0 application.
4. Navigate to the Statistics 27.0.1.0 installation directory (e.g. $SPSS_HOME or 'C:\Program Files\IBM\SPSS\Statistics\27').
5. Locate the following files and remove them to a backup location outside of the Statistics install path:
   $SPSS_HOME/log4j-core-2.13.3.jar
   $SPSS_HOME/log4j-api-2.13.3.jar
   $SPSS_HOME/log4j-1.2-api-2.13.3.jar
   $SPSS_HOME/as-3.2.3.0/lib/log4j-core-2.13.3.jar
   $SPSS_HOME/as-3.2.3.0/lib/log4j-api-2.13.3.jar
   $SPSS_HOME/common/ext/bin/spss.cognos.9/log4j-1.2.17.jar
6. Copy the interim fix files (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) to these locations:
   $SPSS_HOME/
   $SPSS_HOME/as-3.2.3.0/lib/
   $SPSS_HOME/common/ext/bin/spss.cognos.9/

SPSS 26

Windows

1. Download the Interim Fix ZIP file.
2. Right-click the ZIP file and select Extract All to extract the files to a temporary location.
3. Ensure SPSS 26.0.0.1 is not currently running.
4. Open File Explorer and navigate to the SPSS 26.0.0.1 installation directory (e.g. 'C:\Program Files\IBM\SPSS Statistics\').
5. Locate the following files, copy them to a backup location outside of the SPSS installation directory, then delete the originals:
   C:\Program Files\IBM\SPSS Statistics\common\ext\bin\spss.tm1.9\log4j-1.2.16.jar
   C:\Program Files\IBM\SPSS Statistics\common\ext\bin\spss.cognos.9\log4j-1.2.17.jar
   C:\Program Files\IBM\SPSS Statistics\as-3.1.1.0\lib\com.springsource.org.apache.log4j-1.2.16.jar
6. Copy the interim fix files that you extracted (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) and paste them to these locations:
   C:\Program Files\IBM\SPSS Statistics\common\ext\bin\spss.tm1.9\
   C:\Program Files\IBM\SPSS Statistics\common\ext\bin\spss.cognos.9\
   C:\Program Files\IBM\SPSS Statistics\as-3.1.1.0\lib\

macOS

1. Download the Interim Fix ZIP file.
2. Click the ZIP file to extract the interim fix files.
3. Close the Statistics 26.0 application.
4. Open Finder and navigate to the Statistics 26.0 installation directory (e.g. $SPSS_HOME or '/Applications/IBM/SPSS/Statistics/26').
5. Locate the following files, copy them to a backup location outside of the SPSS installation directory, then delete the originals. To navigate inside of the SPSS Statistics.app, right-click the file and select Show Package Contents:
   $SPSS_HOME/SPSSStatistics.app/Contents/common/ext/bin/spss.tm1.9/log4j-1.2.16.jar
   $SPSS_HOME/SPSSStatistics.app/Contents/common/ext/bin/spss.cognos.9/log4j-1.2.17.jar
   $SPSS_HOME/SPSSStatistics.app/Contents/as-3.1.1.0/lib/com.springsource.org.apache.log4j-1.2.16.jar
6. Copy the interim fix files (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) to these locations:
   $SPSS_HOME/SPSSStatistics.app/Contents/common/ext/bin/spss.tm1.9/
   $SPSS_HOME/SPSSStatistics.app/Contents/common/ext/bin/spss.cognos.9/
   $SPSS_HOME/SPSSStatistics.app/Contents/as-3.1.1.0/lib/

Linux

1. Download the Interim Fix ZIP file.
2. Extract the interim fix files.
3. Close the Statistics 26.0 application.
4. Navigate to the Statistics 26.0 installation directory (e.g. $SPSS_HOME or 'C:\Program Files\IBM\SPSS\Statistics\26').
5. Locate the following files and remove them to a backup location outside of the Statistics install path:
   $SPSS_HOME/common/ext/bin/spss.tm1.9/log4j-1.2.16.jar
   $SPSS_HOME/common/ext/bin/spss.cognos.9/log4j-1.2.17.jar
   $SPSS_HOME/as-3.1.1.0/lib/com.springsource.org.apache.log4j-1.2.16.jar
6. Copy the interim fix files (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) to these locations:
   $SPSS_HOME/common/ext/bin/spss.tm1.9/
   $SPSS_HOME/common/ext/bin/spss.cognos.9/
   $SPSS_HOME/as-3.1.1.0/lib/