search

yixia / VitamioBundle

Vitamio for Android
http://www.vitamio.org/en/
Other
5.27k stars 2.07k forks source link

Old OpenSSL library version with vulnerability (Google says it can remove the app from Play Store) #248

Open xtazz opened 9 years ago

xtazz commented 9 years ago

Hello!

I’m developing an app for Android and using Vitamio video player in it. I’ve uploaded my app for internal testing in Google Play and it says that my app can be removed from Google Play because I use the old version of OpenSSL (with recently found shellshock vulnerability). The only SDK I’m using in the app is Vitamio SDK, so that means that the old version of OpenSSL is inside Vitamio library and I can’t remove it because it’s compiled and I can’t remove OpenSSL from there. Can you help me with this issue? Maybe you can rebuild your SDK without OpenSSL or with latest version. Thank you very much in assistance!

Akiracr commented 9 years ago

I think i have the same problem, Didi you solved the problem?

xtazz commented 9 years ago

@Akiracr Yes, I did. You can download updated binary version from Vitamio here: https://github.com/yixia/VitamioBundle/tree/master/vitamio/res/raw But they only updated it for ARM, not x86