Google play - security alert

Discussion and feedback on Construct 2

Post » Mon Dec 15, 2014 5:25 pm

I have a game on google play since 29th Oct 2014 and today this alert shows up in my developer console

Security alert
Your app is statically linking against a version of OpenSSL that has multiple security vulnerabilities. You should update OpenSSL as soon as possible.
The vulnerabilities were addressed in OpenSSL versions beginning with 1.0.1h, 1.0.0m and 0.9.8za. To confirm your OpenSSL version, you can do a grep via ("$ unzip -p YourApp.apk | strings | grep "OpenSSL""). For more information about the vulnerability, please consult http://www.openssl.org/news/secadv_20140605.txt.
To confirm that you've upgraded correctly, upload the updated version to the Developer Console and check back after five hours.
Please note: While it's unclear whether these specific issues affect your application, applications with vulnerabilities that expose users to risk of compromise may be considered "dangerous products" and subject to removal from Google Play.

Can someone please explain me what's this all about?
ImageImageImageImage
B
157
S
66
G
41
Posts: 2,598
Reputation: 34,823

Post » Mon Dec 15, 2014 7:55 pm

Yeah this just popped up on my games as well. Do you use Crosswalk? also did you use any third party plugins?
B
42
S
17
G
2
Posts: 850
Reputation: 6,209

Post » Mon Dec 15, 2014 8:00 pm

Crosswalk was used for the build
Excluding all official pluigins, just the Paster as a third party one. From official ones probably AdmobAds is the one to cause some issue. Don't think array, browser, sprite, audio etc have something to do with it.
ImageImageImageImage
B
157
S
66
G
41
Posts: 2,598
Reputation: 34,823

Post » Wed Dec 17, 2014 2:05 pm

I have 2 crosswalk games on the market, and both of them have the alert as well.
B
4
Posts: 12
Reputation: 272

Post » Wed Dec 17, 2014 2:17 pm

Yesterday this alert disappeared after some time but today it's back again.
ImageImageImageImage
B
157
S
66
G
41
Posts: 2,598
Reputation: 34,823

Post » Wed Dec 17, 2014 3:02 pm

Today is the first time I noticed it; but that isn't saying much :) It could have been there for a while. I would have to believe that Admob is the issue; as it is the only thing in my apps that even uses the network, let alone secure connections.
B
4
Posts: 12
Reputation: 272

Post » Wed Dec 17, 2014 4:07 pm

@mjg7876 I don't think it is Admob, a couple of apps I have that have no Ads (admob or otherwise) are getting this alert also. One of them has no outbound links whatsoever.
B
8
S
1
Posts: 90
Reputation: 644

Post » Wed Dec 17, 2014 6:45 pm

Just got an email from Google Play about this.
B
8
S
1
Posts: 90
Reputation: 644

Post » Wed Dec 17, 2014 11:22 pm

B
7
S
1
Posts: 27
Reputation: 663

Post » Wed Dec 17, 2014 11:55 pm

Same notifications here. Anyone has a clue on this?
B
4
S
1
Posts: 24
Reputation: 398

Next

Return to Construct 2 General

Who is online

Users browsing this forum: No registered users and 7 guests