[Interest] Google Play 60-day deadline for resolving OpenSSL vulnerabilities

[Nuno Santos]

The truth is that I received the message and after 15 minutes I had received another email saying the last email was a mistake. 

Have you received such email from Google?

Nuno Santos
Founder / CEO / CTO
www.imaginando.pt
+351 91 621 69 62

> On 15 May 2015, at 18:29, md at rpzdesign.com wrote:
> 
> Oops, Sorry.
> 
> The message replies boundaries were not that clear.
> 
> Nuno, do you have a comment on how to get the proper OpenSSL requirements met from Google Play.
> 
> Are the Openssl libraries linked into the APK so all we have to do is rebuild with QtCreator and re-upload to google play?
> 
> Or is there some other thing that we have to do to get around the security hole in Openssl and get linked with a fixed version.
> 
> The problem as I see it is that Android has the OpenSSL libraries already on the device and Qt just dynamically links to them.
> 
> So it would be incumbent on the device holder to update the operating system to a newer ANdroid to get the latest and safeest openSSL libraries.
> 
> What are your comments because even though I thought THiago made the comment, he corrected me and you made the "Upgrade and re-load to google" comment.
> 
> And I am having a hard time understanding the moving pieces of that statement.
> 
> Thanks,
> 
> Mark
> 
> 
> On 5/15/2015 11:14 AM, Thiago Macieira wrote:
>> On Friday 15 May 2015 07:13:55 rpzrpzrpz at gmail.com wrote:
>>> Thiago:
>>> 
>>> What do you mean by the phrase "Upgrade and re-load to Google"
>>> 
>>> Are the OpenSSL libraries linked into the APK from your local NDK?
>>> 
>>> Or are the OpenSSL libraries on the smartphone or tablet device already?
>>> 
>>> Thanks for your response,
>> 
>> I have no clue. I've never developed for Android.
>> 
>> But Nuno has, so he should have the information readily available.
>> 
> 
> -- 
> No spell checkers were harmed during the creation of this message.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.qt-project.org/pipermail/interest/attachments/20150515/e2b6e6b2/attachment.html>