HPSBMU03076 - HotFix Kit

[VulnResearcher]

Hello all,

I am trying to find some more information about HPSBMU03076 (OpenSSL vulnerabilities)

It does not appear as though the OpenSSL vulnerabilities are mentioned in the changelog

ftp://ftp.hp.com/pub/softlib2/software1/pubsw-windows/p1398583645/v99937/SIM73_hotfix_2014_June_win.txt

I assume the fix for HPSBMU03076 is part of HOTFIX73_034, but cannot correlate the two.

Also, the version in the registry is updated to C.07.03.02 after applying the HotFix Kit, but on the download page, it says "Applying the hotfix update kit will not change the version number of HP SIM".  Is the HotFix Kit the same as 7.3.2?

Thanks

[Andrew_Haak]

Hello,

I would check the patch readme for the fixes and compare it to the batch file for the 7.3.2 fix. Earlier fixes i installed (not the hotfix) just ran some updates and than wrote a registry version for SIM that was one version higher.

Currently i don't have access to FTP to download these packages to check this.