Security Alert for Android App

[i Appmaker]

In my android App

1. I am using the Ads from Admob and Facebook Audience network mediated via Admob.

2. Google Analytics.

3. IAP

I have got an alert for my App. I have pasted the content below.

Security alert

Your app is using an unsafe implementation of the X509TrustManager interface with an Apache HTTP client, resulting in a security vulnerability. Please see this Google Help Center article for details, including the deadline for fixing the vulnerability.in a security vulnerability. Please see this Google Help Center article for details, including the deadline for fixing the vulnerability.

I suspect the Ad networks.

I wonder how can I find the library which is causing this. Could you please let me know what I need to refer in LogCat. Also please advice if there is any specific case I need to look for.

Thanks,

Sudhakar

[Albert Gazetdinov]

I do not have advertising on google but still received this message

четверг, 18 февраля 2016 г., 7:27:33 UTC+3 пользователь i Appmaker написал:

[Vu Chau (Mobile Ads SDK Team)]

All,

Does your implementation implements X509TrustManager anywhere (in your own code and/or in an external library)?  If so then that Help Center article should provide a thorough coverage for how to address that problem.  I'd suggest going through your code and the libraries, and remove the affected one.

See [1] and [2] for more details.

Vu Chau

Mobile Ads SDK Team

[William Ferguson]

That warning from Google Play provides exact class and line numbers for where this fault occurs.

You should be able to easily trace it.

William

[i Appmaker]

Then it should be easy to track.

But in the alert I have 2 links.

1st link - X509TrustManager

2nd link - this Google Help Center article

Apart from this links where I can find the exact class and line numbers from where this fault occurs. Please advice.

Thanks,
Sudhakar
https://play.google.com/store/apps/dev?id=5227946957970604452

--

---
You received this message because you are subscribed to a topic in the Google Groups "Google Mobile Ads SDK Developers" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-admob-ads-sdk/nIPjSMZUmiM/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-admob-ads...@googlegroups.com.
To post to this group, send email to google-adm...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[William Ferguson]

No links. In the email that you received (at the bottom) it will have said something like:

Affected app(s), version(s), and class(es):

au.com.xandar.jumblee 
2178 
com.flurry.android.n;

Which indicates that in this old version (2178) of one of my apps (which uses Flurry) this class is to blame com.flurry.android.n

[i Appmaker]

I have not received any email. I just got the alert in developer console.

Now Is there is any way to get it ?

Thanks,
Sudhakar
https://play.google.com/store/apps/dev?id=5227946957970604452

[i Appmaker]

Sorry. I got an email.. but it does not have the classes..

Affected app(s), version(s), and class(es):

memory.game.collection.free
18

Thanks,
Sudhakar
https://play.google.com/store/apps/dev?id=5227946957970604452