3281952 - Crystal Reports for Visual Studio - Security issue in SSL dependencies

Security scan determined issue in the following locations:

c:\program files (x86)\sap businessobjects\crystal reports for .net framework 4.0\common\sap businessobjects enterprise xi 4.0\win32_x86\libeaym32.dll

c:\program files (x86)\sap businessobjects\crystal reports for .net framework 4.0\common\sap businessobjects enterprise xi 4.0\win32_x86\ssleaym32.dll

Our customer will not use Crystal Reports unless they are provided proof that SAP has an extended support agreement with OpenSSL.org for version 1.0.2x

1) Does SAP have an extended support agreement with OpenSSL.org for version 1.0.2x and can you provide that proof so I can share it with our customer?

2) If that is not possible, does SAP have other version(s) of Crystal Reports runtime you are actively supporting that either do not use OpenSSL at all, or use a supported version of OpenSSL?

3) If that is not possible, when does SAP intend to offer a new version of the runtime with a version of OpenSSL that OpenSSL.org does support?

Crystal Reports for Visual Studio - SP 32 and SP 33

cr for vs, Open SSL cxlib , KBA , BI-DEV-NET , BI Software Development Kits (SDKs) - .NET or Other , Problem