Notice: AIR 19 - Android SSL Update

[chris.campbell]

For those using AIR 19 to support devices with Android 4 and below, we will be rereleasing the version 19 SDK with the appropriate OpenSSL library to address current vulnerabilities.  We expect to post this SDK to the AIR Archive page shortly.  This update will allow developers to rebuild their captive Android applications and resubmit them to the Play store.

Please note, we plan to delist the AIR 19 shared runtime currently hosted on the Play store (the latest shared runtime version, currently v21, will remain).  Only captive applications will work with the updated AIR 19 SDK going forward.  We don't believe this will impact the vast majority of applications but we'd like to get feedback if you have concerns.

[rewb0rn]

This is great news, thank you Chris and the team!

[KarlCfs]

Hi Chris,

This is great news. Would it be possible to release an updated AIR version that supports iOS 5.1.1 as well? We have surprisingly many costumers still using iPad 1 in schools and homes.

[marcanw]

The mighty 19 🙂

[ts37358013]

@Chris

Thanks a lot!

This help us greatly!

[sweedishfishy]

Thank you, Chris. This helps us a lot.

[rewb0rn]

Hello, is this up, yet? The archive still lists Air 19.0.0.241 which to my knowledge is the unfixed version.

Thanks!

[bslote]

ETA on this? We're really caught between a rock and a hard place right now as the google play deadline creeps closer and closer.

Thanks

[Anki_AG_]

HI,

Sorry for the delay. We are very well aware of the Google's deadline.We are working on this and will update you shortly. Thanks for your patience.

Thanks,

Adobe Air Team

[rewb0rn]

Hi Anki,

any update or ETA for this?

Thanks,
Ruben

[mar_pies]

The archive page now links to AIR SDK v19.0.0.249. I have packaged a sample APK and it reports OpenSSL v1.0.2f so it should be fixed now.

[mohameda27388444]

I can confirm that as well APKs packaged with the just-released 19.0.0.249 are reporting OpenSSL 1.0.2f

$ unzip -p your_apk.apk | strings | grep OpenSSL
.....
TLSv1 part of OpenSSL 1.0.2f 28 Jan 2016
OpenSSL 1.0.2f 28 Jan 2016
SHA-256 part of OpenSSL 1.0.2f 28 Jan 2016
DlSHA-512 part of OpenSSL 1.0.2f 28 Jan 2016
Big Number part of OpenSSL 1.0.2f 28 Jan 2016
PEM part of OpenSSL 1.0.2f 28 Jan 2016
......

[Applauz78]

How can you add this to Animate CC though?  It wont let me add anything under AIR 20

[swfisgood]

Does Air 20 and above support android 4.0? I'm reading conflicting info:

At the top of this thread chris Campbell writes "For those using AIR 19 to support devices with Android 4 and below..."

But the Air 20 release notes state: "Going forward, applications built using the latest AIR SDK (AIR20) will only support Android OS 4.0 or greater."

[Colin Holgate]

The latest requirements, which the AIR 27 read me links to:

Tech specs and system requirements | Adobe AIR

still stay Android 4.0 and above.

[swfisgood]

Thanks so much Colin!!!  I guess it was right there in front of me!