OpenSSL - Google Play "The vulnerabilities were addressed in OpenSSL 1.02f/1.01r"

[grosssmutttr]

Just got a warning sign behind every app in the Google Play developer console.

So I remember this issue already appeared a year ago:

How to address OpenSSL vulnerabilities in your apps - Google Help

Currently I'm using AIR 20.

Is this issue also part of the current AIR 21?

Best

omi

[LilGames]

Subscribing to this thread so I can see Adobe's response.

Here is Google's information about the vulnerability:

https://support.google.com/faqs/answer/6376725

ALL my apps made with Adobe AIR have this alert. We have until July to fix it.

[shajby82]

Got the same warnings for all my apps using Adobe Air.

[edutor25]

Same warnings in all my apps and client apps.

[dasessig]

Same here 😞 ... 20 Apps

[Julien26]

Same here, I hope that it will be fixed ASAP !

[Flipline]

Same warning here, I believe all of our apps listed in the email were using AIR 18, and we haven't released any apps with a newer version since then.  Has this been in addressed in 20 or 21?

[PeteDevFF]

Same here

[Applauz78]

Ughhh ... 22 apps for me    .. Most of mine are AIR 20

[Infin8]

Come on chris.campbell. Work your magic once more please

[Infin8]

I already thought the AIR team was talented but that was impressive. he he!

[rewb0rn]

Phew

[grosssmutttr]

The warnings appear again and I think Adobe must handle this issue by updating the openSSL version in the AIR SDK.

The developer console sometimes has problems grabbing the ssl version and this is why it sometimes disappears.

This time we definitely have to update the air version...

[dasessig]

Yes - unfortunately all warnings are back again  

[Mark.fromOP]

Yep back again. I wish Google Play would resolve this instead of sending out super annoying April Fools emails about distributing our apps in space.

[Anki_AG_]

Hi All,

We have verified and AIR 21.0 is using openSSL version 1.02f. AIR 20.0 is using openSSL 1.02d. This might be an issue from Google developer console. Could you please use this command "unzip -p YourApp.apk | strings | grep "OpenSSL" to check the openSSL version in your app.

Thanks,

Adobe Air Team

[rewb0rn]

Hi Anki,

will you update Air 19 SDK with the new OpenSSL version as well? We still want to be able to target Android 2 devices (5% of our audience for our apps).

Thanks!

[bslote]

rewb0rn wrote:

Hi Anki,

will you update Air 19 SDK with the new OpenSSL version as well? We still want to be able to target Android 2 devices (5% of our audience for our apps).

Thanks!

I 2nd this. We're having too many issues with AIR 21 to update at this time... This is a fairly serious security vulnerability, Adobe should release patched versions of older SDKs.

[edutor25]

Hi Anki, i´m using Adobe Air SDK 21.0.0.128 and OpenSSL Scanner from Bluebox (Android app).

The scanner shows this version. OpenSSL: 1.0.2d on my apps compiled with Air 21.0.0.128

I don´t know how to check the OpenSSL version from windows,

Maybe another developer can check and share the results.

[No_Way11]

Will you be updating version 19 to fix this issue?

We would lose 5% of our users if we go from version 19 to version 21 because of lack of support for Android OS < v4.0.

[rewb0rn]

Pushing this, any chance to get Air 19 updated with the latest OpenSSL version? Air 19 is the last Air version to support Android versions below 4, so the fix would be really appreciated. I would assume this is a quick fix that can easily be deployed.

Thanks a lot!

[Anki_AG_]

Hi,

We have updated AIR SDK 19 with the new OpenSSL version 1.0.2f. Please visit Find and download archived versions of Adobe AIR SDK  and download AIR SDK 19.0.0.249. Please let us know in case of any issues.

Thanks,

Ankit

Adobe AIR Team

[Anki_AG_]

Hi,

We have updated AIR SDK 19 with the new OpenSSL version 1.0.2f. Please visit Find and download archived versions of Adobe AIR SDK  and download AIR SDK 19.0.0.249. Please let us know in case of any issues.

Thanks,

Ankit

Adobe AIR Team

[Julien26]

Hi,

I tried to add this new version of Air 19 to my SDKs in Animate CC, but I have an error message saying that I can't add a SDK version prior to 20.0.0.204... what can I do ?

Thanks in advance,

[Applauz78]

Did you find a fix for adding AIR 19 to Animate CC ?