OpenSSL 1.0.1e is vulnerable and not recommended by Google about conceal HOT 6 CLOSED

It triggers this message

Hello,

One or more of your apps is running an outdated version of OpenSSL, which has multiple security vulnerabilities. You should update OpenSSL as soon as possible. For more information about the most recent security vulnerability in OpenSSL, please see http://www.openssl.org/news/secadv_20140605.txt.

Please note, while it's unclear whether these specific issues affect your application, applications with vulnerabilities that expose users to risk of compromise may be considered “dangerous products” and subject to removal from Google Play.

Regards,
Google Play Team

©2014 Google Inc.
1600 Amphitheatre Parkway
Mountain View, CA 94043

from conceal.

I'll have an update up in a bit. This warning is misleading since it refers to the libssl vulnerabilities and not vulns in libcrypto.

Libcrypto is fine, but it's good to upgrade nevertheless

from conceal.

Just to confirm, are you using libssl in some other library in your app?

from conceal.

Thanks for your quick reply,
I am not using libssl in any other library.
Thanks for the upcoming update !

from conceal.

#33

Give us a few days to properly test this on all the phones and it will be in soon.

from conceal.

done

from conceal.