{"action":"created","issue":{"url":"https://api.github.com/repos/jxcore/jxcore/issues/846","repository_url":"https://api.github.com/repos/jxcore/jxcore","labels_url":"https://api.github.com/repos/jxcore/jxcore/issues/846/labels{/name}","comments_url":"https://api.github.com/repos/jxcore/jxcore/issues/846/comments","events_url":"https://api.github.com/repos/jxcore/jxcore/issues/846/events","html_url":"https://github.com/jxcore/jxcore/issues/846","id":134067943,"number":846,"title":"Can we update to the latest release of OpenSSL?","user":{"login":"yaronyg","id":1480964,"avatar_url":"https://avatars.githubusercontent.com/u/1480964?v=3","gravatar_id":"","url":"https://api.github.com/users/yaronyg","html_url":"https://github.com/yaronyg","followers_url":"https://api.github.com/users/yaronyg/followers","following_url":"https://api.github.com/users/yaronyg/following{/other_user}","gists_url":"https://api.github.com/users/yaronyg/gists{/gist_id}","starred_url":"https://api.github.com/users/yaronyg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yaronyg/subscriptions","organizations_url":"https://api.github.com/users/yaronyg/orgs","repos_url":"https://api.github.com/users/yaronyg/repos","events_url":"https://api.github.com/users/yaronyg/events{/privacy}","received_events_url":"https://api.github.com/users/yaronyg/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-02-16T19:00:44Z","updated_at":"2016-04-11T17:06:50Z","closed_at":null,"body":"I'm talking about the 1.0.1 branch which is the branch that JXcore currently uses (the most up to date branch is 1.0.2 but whatever, 1.0.1 at least is getting security fixed). JXcore currently is using the 1.0.1p 9 Jul 2015 release of 1.0.1 but the [latest release](https://www.openssl.org/source/) is 1/28/2016."},"comment":{"url":"https://api.github.com/repos/jxcore/jxcore/issues/comments/208451710","html_url":"https://github.com/jxcore/jxcore/issues/846#issuecomment-208451710","issue_url":"https://api.github.com/repos/jxcore/jxcore/issues/846","id":208451710,"user":{"login":"Vaporexpress","id":8735917,"avatar_url":"https://avatars.githubusercontent.com/u/8735917?v=3","gravatar_id":"","url":"https://api.github.com/users/Vaporexpress","html_url":"https://github.com/Vaporexpress","followers_url":"https://api.github.com/users/Vaporexpress/followers","following_url":"https://api.github.com/users/Vaporexpress/following{/other_user}","gists_url":"https://api.github.com/users/Vaporexpress/gists{/gist_id}","starred_url":"https://api.github.com/users/Vaporexpress/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Vaporexpress/subscriptions","organizations_url":"https://api.github.com/users/Vaporexpress/orgs","repos_url":"https://api.github.com/users/Vaporexpress/repos","events_url":"https://api.github.com/users/Vaporexpress/events{/privacy}","received_events_url":"https://api.github.com/users/Vaporexpress/received_events","type":"User","site_admin":false},"created_at":"2016-04-11T17:06:50Z","updated_at":"2016-04-11T17:06:50Z","body":"Eureka! Solved!\r\nReading the blog review of \"[Stuff Yaron Finds Interesting](http://www.goland.org/jxcore/)\" i see:\r\n\r\n> \"deps/openssl They are using the same release of openssl as Node.js master. Which makes sense. This is code that must be kept up to date.\"\r\n\r\n... and this is the right clue to a clean workaround:\r\n\r\n1) Download JXcore sources which is based on node 0.10.x so we look for the most current version of that branch (Node v0.10.44, 04/01/2016) ([this](https://nodejs.org/en/blog/release/v0.10.44/)) and download its source code (has openssl v1.0.1s which addresses last vulnerabilities).\r\n\r\n2) Replace jxcore/deps/openssl folder with sources in zip node node/deps/openssl.\r\nThat is All. \r\n\r\nNow you can compile native \".so libraries\".\r\n\r\n**NOTE**: Some devices (?) keep getting errors related with [this issue](https://github.com/jxcore/jxcore-cordova/issues/144) on Release builds.\r\n\r\nEnjoy! This project is a great work!"}}