{"action":"created","issue":{"url":"https://api.github.com/repos/songz/cordova-plugin-opentok/issues/135","labels_url":"https://api.github.com/repos/songz/cordova-plugin-opentok/issues/135/labels{/name}","comments_url":"https://api.github.com/repos/songz/cordova-plugin-opentok/issues/135/comments","events_url":"https://api.github.com/repos/songz/cordova-plugin-opentok/issues/135/events","html_url":"https://github.com/songz/cordova-plugin-opentok/issues/135","id":52397637,"number":135,"title":"google play warning about vulnerable openssl version","user":{"login":"dusty","id":792,"avatar_url":"https://avatars.githubusercontent.com/u/792?v=3","gravatar_id":"","url":"https://api.github.com/users/dusty","html_url":"https://github.com/dusty","followers_url":"https://api.github.com/users/dusty/followers","following_url":"https://api.github.com/users/dusty/following{/other_user}","gists_url":"https://api.github.com/users/dusty/gists{/gist_id}","starred_url":"https://api.github.com/users/dusty/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dusty/subscriptions","organizations_url":"https://api.github.com/users/dusty/orgs","repos_url":"https://api.github.com/users/dusty/repos","events_url":"https://api.github.com/users/dusty/events{/privacy}","received_events_url":"https://api.github.com/users/dusty/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2014-12-18T18:12:25Z","updated_at":"2015-04-20T14:21:32Z","closed_at":null,"body":"I got an email from google play \r\n\r\n\"The vulnerabilities were addressed in OpenSSL versions beginning with 1.0.1h, 1.0.0m, and 0.9.8za. To confirm your OpenSSL version, you can do a grep via (\"$ unzip -p YourApp.apk | strings | grep \"OpenSSL\"\"). For more information about the vulnerability, please consult http://www.openssl.org/news/secadv_20140605.txt.\"\r\n\r\nI found a bash script from stackoverflow to help narrow down where the problem is.  Running it on my project, I get the following output.\r\n\r\nFound OpenSSL versions\r\nssl_work_dir/lib/armeabi/libopentok.so:OpenSSL 1.0.1e 11 Feb 2013\r\nssl_work_dir/lib/x86/libopentok.so:OpenSSL 1.0.1e 11 Feb 2013\r\n\r\nI installed the most recent version via git (com.tokbox.cordova.opentok 1.0.2)\r\n\r\nIs there anyway to upgrade openssl that appears to be bundled into opentok?  They didn't give me a timeline, so I don't believe this is urgent, but also not certain.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/songz/cordova-plugin-opentok/issues/comments/94465770","html_url":"https://github.com/songz/cordova-plugin-opentok/issues/135#issuecomment-94465770","issue_url":"https://api.github.com/repos/songz/cordova-plugin-opentok/issues/135","id":94465770,"user":{"login":"mark-veenstra","id":8984015,"avatar_url":"https://avatars.githubusercontent.com/u/8984015?v=3","gravatar_id":"","url":"https://api.github.com/users/mark-veenstra","html_url":"https://github.com/mark-veenstra","followers_url":"https://api.github.com/users/mark-veenstra/followers","following_url":"https://api.github.com/users/mark-veenstra/following{/other_user}","gists_url":"https://api.github.com/users/mark-veenstra/gists{/gist_id}","starred_url":"https://api.github.com/users/mark-veenstra/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mark-veenstra/subscriptions","organizations_url":"https://api.github.com/users/mark-veenstra/orgs","repos_url":"https://api.github.com/users/mark-veenstra/repos","events_url":"https://api.github.com/users/mark-veenstra/events{/privacy}","received_events_url":"https://api.github.com/users/mark-veenstra/received_events","type":"User","site_admin":false},"created_at":"2015-04-20T14:21:32Z","updated_at":"2015-04-20T14:21:32Z","body":"Should be fixed from version 2.4.1"}}