Product Name:    TIBCO ActiveSpaces(R)
Release Version: 2.1.2_HF-012
Release Date:    April 2014
================================================================================
Legal Notice

This Hotfix is provided pursuant to the terms and conditions of the
written maintenance and support agreement between you (or your company)
and TIBCO and use of the Hotfix is controlled by the terms of such
written maintenance and support agreement.

================================================================================
Introduction

Hotfixes are cumulative. This is the twelfth hotfix for TIBCO ActiveSpaces 2.1.2.

NOTE: For a description of several new features added in this Hotfix, see the            
      TIB_activespaces_2.1.2_HF-012_addendum.pdf file.
================================================================================
Fix for OpenSSL TLS Heartbeat Read Overrun 

Several versions of the OpenSSL library were reported to be vulnerable to an specific
exploitation that can lead to compromised credentials. The bug in the open
source code was disclosed this week and can also affect ActiveSpaces' integrity 
when secured metaspaces are in use.

Hotfix 012 upgrades the SSL library used with ActiveSpaces to to 1.0.1g. Users are 
advised to regenerate the credentials used with in deployed policies and tokens
(for production environments). 

================================================================================

This hot fix can be downloaded from the TIBCO Support file transfer server- mft.tibco.com.

Server name: mft.tibco.com

Credentials: use your TSC (TIBCO Support Central website) login.

Browser:  https://mft.tibco.com

FTP: port 21

SFTP: port 22

FTP using your browser is not supported, please use an FTP client or command-line.  TIBCO employees must use a secure protocol. 

Once logged on you can find the hot fix under:  /AvailableDownloads/ActiveSpaces/2.1.2/hotfix-12