Does rolling back to View Client 5.4 resolve the Heartbleed vulnerability (for client devices)?

Or does the OpenSSO portion not get rolled back by uninstalling View Client 2.x and installing View 5.4?

And for VM's with the View 5.2 Remote Experience Agent, does uninstalling the agent resolve the issue, or will the VM remain vulnerable?