OpenSSL Heartbleed Vulnerability

[Former Member]

I have received Siemens CERT vulnerability for OpenSSL HeartBleed on Agentry server that is using OpenSSL,So I want to know whether Agentry Server or related components including JRE is affected by OpenSSL HeartBleed vulnerability?

Before

After the service has stopped.

[Former Member · Accepted solution]

See SAP KBA 2007139 for details on the Heartbleed vulnerability in Agentry.

[Former Member · Accepted solution]

Dear Samuli,

Thank you for your reply!

Now I see the Agentry fixed version is 'Agentry 6.0.40.1' in fixed product version list.

But in "http://software.syclo.com" the newest version is 'Agentry 6.0.36.0', so where can I download the fixed version 'Agentry 6.0.40.1'?

Best Regards,

Hu Hongfeng

[Former Member · Accepted solution]

Hi ,

check the SAP Software download center: http://service.sap.com/swdc

Go to Installations & Upgrades -> Agentry to find 6.0.42 version downloads.

Regards

[Former Member · Accepted solution]

Dear Samuli,

I checked my 'Download Basket',there is only 'Release Notes for Agentry Version 6.0.40.1' I can download.

Best Regards

[bill_froelich · Accepted solution]

You need to first search for the items under Installations & Upgrades as Merten mentioned and then add them to your download basket.

This is also fixed for Agentry under SMP 3.0 in the SP03 PL01 release.

--Bill