Adobe-Runtime-Support icon indicating copy to clipboard operation
Adobe-Runtime-Support copied to clipboard

Published 20 hours ago • verified publisher icon airsdk

Your app uses a defective version of the OpenSSL library, which can cause your app to crash. Update to a fixed version of OpenSSL.

Open saravanansam2997 opened this issue 1 year ago • 13 comments

image

AIR SDK : 33.1.1.929

saravanansam2997 avatar Oct 04 '22 14:10 saravanansam2997

Thanks, I'll check that, I thought we updated from 1.1.1d quite a while ago..! Which platform/runtime binary was this scanning? thanks

ajwfrost avatar Oct 04 '22 15:10 ajwfrost

We're seeing the same thing (with uploads from 33.1.1.743), it seems Google just started flagging this in late September since our uploads a month earlier didn't mention this.

In our case that error is showing up in the Pre-launch Report, but doesn't show up when uploading files and releasing a build (and it did let us release to production.) The "Learn more" link goes here, explaining anything below OpenSSL 1.1.1i will be flagged with this error: https://support.google.com/faqs/answer/12576638

FliplineStudios avatar Oct 05 '22 05:10 FliplineStudios

Using any native extensions that may include it? Might have to double check we have updated ours.

marchbold avatar Oct 05 '22 05:10 marchbold

My app crashes because of the defective version of OpenSSL library. Is there an update version of OpenSSL 1.1.1d?

ponarangan avatar Oct 05 '22 07:10 ponarangan

Okay actually you're right, sorry, we've got 1.1.1d in AIR for Android. Odd as I recall the reason we updated to that one was because of some instabilities, I thought we'd updated to 1.1.1i but it turns out that was just on our Flash Player branch. So it should be straightforward to merge those libraries in with the AIR builds.... (or I'll check how much effort it may be to update to 1.1.1.q.. and I'll also make a note to look at openssl 3.0....)

Edit: I forgot we don't build FP for Android any more! so the updates in FP which are 1.1.1k aren't going to help here... so will check for updating straight to 1.1.1q...

ajwfrost avatar Oct 05 '22 07:10 ajwfrost

Okay actually you're right, sorry, we've got 1.1.1d in AIR for Android. Odd as I recall the reason we updated to that one was because of some instabilities, I thought we'd updated to 1.1.1i but it turns out that was just on our Flash Player branch. So it should be straightforward to merge those libraries in with the AIR builds.... (or I'll check how much effort it may be to update to 1.1.1.q.. and I'll also make a note to look at openssl 3.0....)

Edit: I forgot we don't build FP for Android any more! so the updates in FP which are 1.1.1k aren't going to help here... so will check for updating straight to 1.1.1q...

What should i do now? What is the solution? Can i publish my app with this issue?

ponarangan avatar Oct 06 '22 16:10 ponarangan

I am also facing this issue!

Shaunmax avatar Oct 06 '22 19:10 Shaunmax

According to the Google information posted above:

Fixing this issue is highly recommended but not mandatory. The publication status of your app will be unaffected by the presence of this issue.

But, it was straightforward to update to 1.1.1q so we're currently testing it and expect to have this update in our next release (on the 50.0 branch) - we're also going to be updating this on 33.1 to continue support for that branch just with critical fixes such as this one...

thanks

ajwfrost avatar Oct 06 '22 19:10 ajwfrost

I have the same problem, and I can't find a solution to the problem, and Google refuses to review the application, and unfortunately I need to work on it because there are errors in my application

Syko1995 avatar Oct 07 '22 20:10 Syko1995

@ajwfrost, hopefully you release the update soon, because the new in app purchase has to be tested and the app online at google play before 1st of November. Thank you for your affords.

apofis1969 avatar Oct 12 '22 17:10 apofis1969

Hi - yes we've had a problem with the next 50.0 release which has caused a few days delay :-( but hoping to get it out before the start of next week. We're also merging some of the fixes back into the 33.1 branch for those who are happier sticking on that one.. timescales should be similar I hope. thanks

ajwfrost avatar Oct 12 '22 19:10 ajwfrost

@ajwfrost thank you

apofis1969 avatar Oct 12 '22 22:10 apofis1969

I have same the problem :(

mon73 avatar Oct 13 '22 23:10 mon73

I have same problem too.

mehmury avatar Oct 14 '22 11:10 mehmury

Hi all - please see the AIR 50.0.1.1 release for a version that includes this change. We're also working on 33.1.1.935 to have a version based on the 33.1 branch with some of the recent fixes..

ajwfrost avatar Oct 17 '22 11:10 ajwfrost

@ajwfrost thank you so much. But please add new sound and video codecs. Thank you!

apofis1969 avatar Oct 19 '22 18:10 apofis1969

Hi all - please see the AIR 50.0.1.1 release for a version that includes this change. We're also working on 33.1.1.935 to have a version based on the 33.1 branch with some of the recent fixes..

@ajwfrost Are you going to release version 33.1.935? Thank you!

Tpman avatar Oct 20 '22 00:10 Tpman

I found 33.1.1.935 release at https://airsdk.harman.com/download/33.1.1.935

sevencong avatar Oct 30 '22 07:10 sevencong

i am using air 33.1.1686 [targetSdkVersion="30"]

and just started getting this error + my app crashes !!

what should I do ?

I need something fast, and I cant upgrade all my ane's to use latest air (it will take me a while)

any suggestions ?

idanasher avatar Nov 01 '22 07:11 idanasher