{"action":"created","issue":{"url":"https://api.github.com/repos/yixia/VitamioBundle/issues/360","repository_url":"https://api.github.com/repos/yixia/VitamioBundle","labels_url":"https://api.github.com/repos/yixia/VitamioBundle/issues/360/labels{/name}","comments_url":"https://api.github.com/repos/yixia/VitamioBundle/issues/360/comments","events_url":"https://api.github.com/repos/yixia/VitamioBundle/issues/360/events","html_url":"https://github.com/yixia/VitamioBundle/issues/360","id":145095151,"number":360,"title":"Vitamio 5.0.0 Google Play warning: You are using a vulnerable version of OpenSSL","user":{"login":"kadriengin","id":14088032,"avatar_url":"https://avatars.githubusercontent.com/u/14088032?v=3","gravatar_id":"","url":"https://api.github.com/users/kadriengin","html_url":"https://github.com/kadriengin","followers_url":"https://api.github.com/users/kadriengin/followers","following_url":"https://api.github.com/users/kadriengin/following{/other_user}","gists_url":"https://api.github.com/users/kadriengin/gists{/gist_id}","starred_url":"https://api.github.com/users/kadriengin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kadriengin/subscriptions","organizations_url":"https://api.github.com/users/kadriengin/orgs","repos_url":"https://api.github.com/users/kadriengin/repos","events_url":"https://api.github.com/users/kadriengin/events{/privacy}","received_events_url":"https://api.github.com/users/kadriengin/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":53,"created_at":"2016-04-01T06:05:47Z","updated_at":"2016-05-09T18:51:04Z","closed_at":"2016-04-13T00:42:16Z","body":"Hi friends, \r\n\r\nim using the last versiyon of  the vitamio today i gat a warnig from google. Please help me can you upgrade the vitamio versiyon ?\r\n\r\nGoogle says to me that mail:\r\n\r\n\r\nHello Google Play Developer,\r\n\r\nYour app(s) listed at the end of this email utilize a version of OpenSSL that contains one or more security vulnerabilities. If you have more than 20 affected apps in your account, please check the Developer Console for a full list.\r\n\r\nPlease migrate your app(s) to OpenSSL 1.02f/1.01r or higher as soon as possible and increment the version number of the upgraded APK. Beginning July 11, 2016, Google Play will block publishing of any new apps or updates that use older versions of OpenSSL. If you’re using a 3rd party library that bundles OpenSSL, you’ll need to upgrade it to a version that bundles OpenSSL 1.02f/1.01r or higher.\r\n\r\nThe vulnerabilities were addressed in OpenSSL 1.02f/1.01r. The latest versions of OpenSSL can be downloaded here. To confirm your OpenSSL version, you can do a grep search for ($ unzip -p YourApp.apk | strings | grep \"OpenSSL\").\r\n\r\nTo confirm you’ve upgraded correctly, submit the updated version to the Developer Console and check back after five hours. If the app hasn’t been correctly upgraded, we will display a warning.\r\n\r\nThe vulnerabilities include \"logjam\" and CVE-2015-3194. The Logjam attack allows a man-in-the-middle attacker to downgrade vulnerable TLS connections to 512-bit export-grade cryptography. This allows the attacker to read and modify any data passed over the connection. Details about other vulnerabilities are available here. For other technical questions, you can post to Stack Overflow and use the tags “android-security” and “OpenSSL.”\r\n\r\nWhile these specific issues may not affect every app that uses OpenSSL, it’s best to stay up to date on all security patches. Apps with vulnerabilities that expose users to risk of compromise may be considered in violation of our Malicious Behavior policy and section 4.4 of the Developer Distribution Agreement.\r\n\r\nApps must also comply with the Developer Distribution Agreement and Developer Program Policies. If you feel we have sent this warning in error, contact our policy support team through the Google Play Developer Help Center.\r\n\r\nRegards,\r\n\r\nThe Google Play Team\r\n\r\n©2016 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043\r\n\r\nEmail preferences: You have received this mandatory email service announcement to update you about important changes to your Google Play Developer account.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/yixia/VitamioBundle/issues/comments/217954430","html_url":"https://github.com/yixia/VitamioBundle/issues/360#issuecomment-217954430","issue_url":"https://api.github.com/repos/yixia/VitamioBundle/issues/360","id":217954430,"user":{"login":"FloridaStream","id":7586648,"avatar_url":"https://avatars.githubusercontent.com/u/7586648?v=3","gravatar_id":"","url":"https://api.github.com/users/FloridaStream","html_url":"https://github.com/FloridaStream","followers_url":"https://api.github.com/users/FloridaStream/followers","following_url":"https://api.github.com/users/FloridaStream/following{/other_user}","gists_url":"https://api.github.com/users/FloridaStream/gists{/gist_id}","starred_url":"https://api.github.com/users/FloridaStream/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/FloridaStream/subscriptions","organizations_url":"https://api.github.com/users/FloridaStream/orgs","repos_url":"https://api.github.com/users/FloridaStream/repos","events_url":"https://api.github.com/users/FloridaStream/events{/privacy}","received_events_url":"https://api.github.com/users/FloridaStream/received_events","type":"User","site_admin":false},"created_at":"2016-05-09T18:51:04Z","updated_at":"2016-05-09T18:51:04Z","body":"I dont have v5 sdk, try to use **v4**.\r\n\r\nI have said and I repeat, use **version 4**, it is more reliable than the version 5. All I do is just for the build of **version 4**.\r\n\r\n_Sorry about the possible problems, I'm just an enthusiast trying to help, wanted it to others like me to provide days and hours of their lives to help it ..._\r\nhttps://github.com/VitamioCustom/VitamioUpdates/issues/1#issuecomment-217952079"}}