Interim Fix Installation Guide
This interim fix installation guide will instruct you in how to apply the interim fix addressing the Apache Log4j CVE-2021-44228 vulnerability in IBM SPSS Statistics. Please find your product version below:
SPSS 28
The Interim Fix for SPSS 28 has been incorporated into Fix Pack version 28.0.1.1 available at Update/Support/R.
SPSS 27
Windows
- Download the Interim Fix ZIP file.
- Right-click the ZIP file and select Extract All to extract the files to a temporary location.
- Ensure SPSS 27.0.1.0 is not currently running.
- Open File Explorer and navigate to the SPSS 27.0.1.0 installation directory (e.g. 'C:\Program Files\IBM\SPSS Statistics\').
- Locate the following files, copy them to a backup location outside of the SPSS installation directory, then delete the originals:
C:\Program Files\IBM\SPSS Statistics\log4j-core-2.13.3.jar
C:\Program Files\IBM\SPSS Statistics\log4j-api-2.13.3.jar
C:\Program Files\IBM\SPSS Statistics\log4j-1.2-api-2.13.3.jar
C:\Program Files\IBM\SPSS Statistics\as-3.2.3.0\lib\log4j-core-2.13.3.jar
C:\Program Files\IBM\SPSS Statistics\as-3.2.3.0\lib\log4j-api-2.13.3.jar
C:\Program Files\IBM\SPSS Statistics\common\ext\bin\spss.cognos.9\log4j-1.2.17.jar - Copy the interim fix files that you extracted (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) and paste them to these locations:
C:\Program Files\IBM\SPSS Statistics\
C:\Program Files\IBM\SPSS Statistics\as-3.2.3.0\lib\
C:\Program Files\IBM\SPSS Statistics\common\ext\bin\spss.cognos.9\
macOS
- Download the Interim Fix ZIP file.
- Click the ZIP file to extract the interim fix files.
- Close the Statistics 27.0.1.0 application.
- Open Finder and navigate to the Statistics 27.0.1.0 installation directory (e.g. $SPSS_HOME or '/Applications/IBM SPSS Statistics 27').
- Locate the following files, copy them to a backup location outside of the SPSS installation directory, then delete the originals. To navigate inside of the SPSS Statistics.app, right-click the file and select Show Package Contents:
$SPSS_HOME/SPSS Statistics.app/Contents/bin/log4j-core-2.13.3.jar
$SPSS_HOME/SPSS Statistics.app/Contents/bin/log4j-api-2.13.3.jar
$SPSS_HOME/SPSS Statistics.app/Contents/bin/log4j-1.2-api-2.13.3.jar
$SPSS_HOME/SPSS Statistics.app/Contents/bin/as-3.2.3.0/lib/log4j-core-2.13.3.jar
$SPSS_HOME/SPSS Statistics.app/Contents/bin/as-3.2.3.0/lib/log4j-api-2.13.3.jar
$SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.cognos.9/log4j-1.2.17.jar
$SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.tm1.9/log4j-1.2.16.jar - Copy the interim fix files (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) to these locations:
$SPSS_HOME/SPSS Statistics.app/Contents/bin/
$SPSS_HOME/SPSS Statistics.app/Contents/bin/as-3.2.3.0/lib/
$SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.cognos.9/
$SPSS_HOME/SPSS Statistics.app/Contents/common/ext/bin/spss.tm1.9/
Linux
- Download the Interim Fix ZIP file.
- Extract the interim fix files.
- Close the Statistics 27.0.1.0 application.
- Navigate to the Statistics 27.0.1.0 installation directory (e.g. $SPSS_HOME or 'C:\Program Files\IBM\SPSS\Statistics\27').
- Locate the following files and remove them to a backup location outside of the Statistics install path:
$SPSS_HOME/log4j-core-2.13.3.jar
$SPSS_HOME/log4j-api-2.13.3.jar
$SPSS_HOME/log4j-1.2-api-2.13.3.jar
$SPSS_HOME/as-3.2.3.0/lib/log4j-core-2.13.3.jar
$SPSS_HOME/as-3.2.3.0/lib/log4j-api-2.13.3.jar
$SPSS_HOME/common/ext/bin/spss.cognos.9/log4j-1.2.17.jar - Copy the interim fix files (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) to these locations:
$SPSS_HOME/
$SPSS_HOME/as-3.2.3.0/lib/
$SPSS_HOME/common/ext/bin/spss.cognos.9/
SPSS 26
Windows
- Download the Interim Fix ZIP file.
- Right-click the ZIP file and select Extract All to extract the files to a temporary location.
- Ensure SPSS 26.0.0.1 is not currently running.
- Open File Explorer and navigate to the SPSS 26.0.0.1 installation directory (e.g. 'C:\Program Files\IBM\SPSS Statistics\').
- Locate the following files, copy them to a backup location outside of the SPSS installation directory, then delete the originals:
C:\Program Files\IBM\SPSS Statistics\common\ext\bin\spss.tm1.9\log4j-1.2.16.jar
C:\Program Files\IBM\SPSS Statistics\common\ext\bin\spss.cognos.9\log4j-1.2.17.jar
C:\Program Files\IBM\SPSS Statistics\as-3.1.1.0\lib\com.springsource.org.apache.log4j-1.2.16.jar - Copy the interim fix files that you extracted (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) and paste them to these locations:
C:\Program Files\IBM\SPSS Statistics\common\ext\bin\spss.tm1.9\
C:\Program Files\IBM\SPSS Statistics\common\ext\bin\spss.cognos.9\
C:\Program Files\IBM\SPSS Statistics\as-3.1.1.0\lib\
macOS
- Download the Interim Fix ZIP file.
- Click the ZIP file to extract the interim fix files.
- Close the Statistics 26.0 application.
- Open Finder and navigate to the Statistics 26.0 installation directory (e.g. $SPSS_HOME or '/Applications/IBM/SPSS/Statistics/26').
- Locate the following files, copy them to a backup location outside of the SPSS installation directory, then delete the originals. To navigate inside of the SPSS Statistics.app, right-click the file and select Show Package Contents:
$SPSS_HOME/SPSSStatistics.app/Contents/common/ext/bin/spss.tm1.9/log4j-1.2.16.jar
$SPSS_HOME/SPSSStatistics.app/Contents/common/ext/bin/spss.cognos.9/log4j-1.2.17.jar
$SPSS_HOME/SPSSStatistics.app/Contents/as-3.1.1.0/lib/com.springsource.org.apache.log4j-1.2.16.jar - Copy the interim fix files (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) to these locations:
$SPSS_HOME/SPSSStatistics.app/Contents/common/ext/bin/spss.tm1.9/
$SPSS_HOME/SPSSStatistics.app/Contents/common/ext/bin/spss.cognos.9/
$SPSS_HOME/SPSSStatistics.app/Contents/as-3.1.1.0/lib/
Linux
- Download the Interim Fix ZIP file.
- Extract the interim fix files.
- Close the Statistics 26.0 application.
- Navigate to the Statistics 26.0 installation directory (e.g. $SPSS_HOME or 'C:\Program Files\IBM\SPSS\Statistics\26').
- Locate the following files and remove them to a backup location outside of the Statistics install path:
$SPSS_HOME/common/ext/bin/spss.tm1.9/log4j-1.2.16.jar
$SPSS_HOME/common/ext/bin/spss.cognos.9/log4j-1.2.17.jar
$SPSS_HOME/as-3.1.1.0/lib/com.springsource.org.apache.log4j-1.2.16.jar - Copy the interim fix files (log4j-core-2.17.1.jar, log4j-api-2.17.1.jar, log4j-1.2-api-2.17.1.jar) to these locations:
$SPSS_HOME/common/ext/bin/spss.tm1.9/
$SPSS_HOME/common/ext/bin/spss.cognos.9/
$SPSS_HOME/as-3.1.1.0/lib/