Heartbleed bug?

plancor

Does anyone have any information on how this may or may not affect Lawson environments that use SSL?

Find more posts tagged with

Infor Lawson Technology Group - Discussion

Comments

richardd

www.inforxtreme.com/.../OpenSSL.pdf

plancor

Yes, I did read this notice. However, it appears to address applications hosted by Infor - not those that customers run on premise.

unknown

http://heartbleed.com/ has more information on the vulnerablity. I'm researching this as we speak. If anyone has already done the leg work, please share. :-)

unknown

If you are running Linux (Red Hat or otherwise), then you'll want to check the version of OpenSSL.

For the marjority, Lawson products are running on AIX/Windows and would not use OpenSSL. There are more details on:

http://heartbleed.com/

HTH!

richardd

You can test your systems from this URL:
http://filippo.io/Heartbleed/

You can also download the code and run locally from Windows:

1. Download and install Go: code.google.com/.../detail
2. Download and install Git for Windows: git-scm.com/.../win
3. Set GOPATH environment variable: set GOPATH=C:go
4. Install Heartbleed:
go get github.com/FiloSottile/Heartbleed
go install github.com/FiloSottile/Heartbleed
5. Run test from command line:
Heartbleed www.lawson.com:443

unknown

Information from IBM & Microsoft regarding their products (IIS & IHS not affected):

IBM IHS: www-01.ibm.com/.../docview.wss

Microsoft IIS: blogs.iis.net/.../information-about-heartbleed-and-iis.aspx

Copyright © 2025 Infor. All rights reserved.