Hello Mike,
Currently I don't have any updates on when CR77992 be fixed.
KBA 2143436 is published.
On question 3, according SAP note 2007688 - OpenSSL vulnerability (Heartbleed bug) in multiple SAP Sybase products, the fixed version is ASE15.7 SP62.
Cheers,
Gek
