A SAS Hot Fix that addresses a security vulnerability will appear in the SAS Hot Fix Analysis, Download and Deployment Tool (SASHFADD 2.2 & 2.2.1) Analysis_ report with a reference to SAS Note 58607 (which has been replaced by this SAS KB article).
SASHFADD 2.2.2 includes an [ ] citation in the Analysis_ report for identifying hot fixes that address security vulnerabilities.
A hot fix that addresses a security vulnerability might also address other non-security issues. Click the "Issue(s) Addressed" links in the Analysis_ report to see the complete list of issues addressed by each hot fix.