BY DOWNLOADING, INSTALLING, COPYING, ACCESSING, OR OTHERWISE USING THE SOFTWARE, YOU AGREE TO 
THE TERMS OF THE SPSS LICENSE AGREEMENT UNDER WHICH YOU ACQUIRED IBM SPSS Statistics 26.0.
BY AGREEING, YOU REPRESENT AND WARRANT THAT YOU HAVE FULL AUTHORITY TO ACCEPT THESE TERMS. 
IF YOU DO NOT AGREE TO THESE TERMS,
- DO NOT DOWNLOAD, INSTALL, COPY, ACCESS, OR USE THE SOFTWARE; AND
- PROMPTLY RETURN THE UNUSED MEDIA AND DOCUMENTATION TO THE PARTY FROM WHOM IT WAS OBTAINED. 
IF THE SOFTWARE WAS DOWNLOADED, DESTROY ALL COPIES OF THE SOFTWARE.


Installation instructions 
========================= 
1. Products affected: 	
IBM SPSS Statistics 26.0 (Windows, Linux, MacOSX)
Platforms affected:	
IBM SPSS Statistics 26.0 (Windows, Linux, MacOSX)

2. The related defect id: 
#558 - License Server Java Vulnerabilities

Case#
TS002313358 -- NIH Sev 2, IM SPSS Statistics Subscription Windows Build 1.0.0.1246
TS002289969 -- CATHOLIC UNIVERSITY OF AMERICA, Sev 3, License Manager and Tools 9.1
TS002267249 -- CATHOLIC UNIVERSITY OF AMERICA, Sev 3, SPSS 26.0 and Statistics 26.0

Version or Build Found In
IBM SPSS Statistics 26.0 (Windows)

Steps to Reproduce
Customer writes:
We have scanned our SPSS and license server with Tenable's Nessus Scanner, and have found the following vulnerabilities. Can we expect patches from IBM? If so, when?

Current Behaviour
Current embedded an old version of JRE, 

Expected Behaviour
Need to be updated to latest 8.0.5.35 of IBM released

More Information

3. Affected Files:
The hotfix zip file 26.0-IM-S26STATC-WIN-IF006.zip contains the following files: 
	JRE
	Readme_26.0.0.0-6.txt (this file) 

The hotfix zip file 26.0-IM-S26STATC-LINUX-IF006.tar.gz contains the following files: 
	JRE
	Readme_26.0.0.0-6.txt (this file) 
	
The hotfix zip file 26.0-IM-S26STATC-MAC-IF006.tar.gz contains the following files: 
	JRE
	licenseactivator
	Readme_26.0.0.0-6.txt (this file) 

	
4. How to apply the hot fix: 
Note 1: Depending upon your installation, the following may require a user with machine administrative/root rights.
	Windows:  
		(1) Close the IBM SPSS Statistics 26.0.
		(2) Navigate to the installation directory. 
		(3) Locate the folder JRE, and then backup it to another path.
	 	(4) Copy the interim fix folder JRE to the Statistics installation directory	

	Linux:  
		(1) Close the IBM SPSS Statistics 26.0.
		(2) Navigate to the installation directory. 
		(3) Locate the folder JRE, and then backup it to another path.
	 	(4) Copy the interim fix folder JRE to the Statistics installation directory

	MacOSX:  
		(1) Close the IBM SPSS Statistics 26.0.
		(2) Navigate to the installation directory. 
		(3) Locate the folder Plugins, and then backup it to another path.
	 	(4) Copy the interim fix folder JRE to the Statistics installation directory	
		(5) Locate the file licenseactivator, and then backup it to licenseactivator.bak.
	 	(6) Copy the interim fix file licenseactivator to the Statistics installation directory		
			
IBM SPSS Statistics 26.0 is now patched and ready to be used. 