Re: Question: Security Threat OSS Note 2067859

Hi Frank Buchholz and Patrick Hildenbrand

thank you for joining this discussion so promptly and thank you for your expert feedback.

I too received the email last week, but I interpreted the words incorrectly, and didn't make the extra effort to read the attachment to 2068693, had I done so I would have better understood the scope.

Still, towards the end of last week, I was having doubts and as I would rather ask a question and be wrong than not ask, I put this question here, and am I thankful that I did so.

To wrap up, thanks again, the message is clear, and we will act on it, and this thread will hopefully be useful to others, basically:

     DSA is out - we should all know that from our MS Active Directories which nolonger (Win2012)

     support DSA

     ABAP and Hana systems need an upgraded CryptoLib

     Java stacks which have ABAP certificates will need the certificates reimported

     Nice to have would be to upgrade the cryptolib on the Java stacks while you are at it, but

     this is not a pre-requisite

     The associated OSS Notes are:

               note 2068693

                         Make sure to read the attachment to the Note, if you have

                         SolMan 7.1 SP10 or higher, there's a tool for checking dependencies

               note 2067859

Best regards,

Andy.