The Heartbleed Bug which is affecting millions of websites could also put users of millions of Android smartphones and tablets at risk. In an update on its Online Security blog on Wednesday, Google said Android was not vulnerable to the Heartbleed bug, except for a very specific version – the problem is that the version which is vulnerable is part of a version of Android which makes up the majority of the install base of Android devices around the world. The specific version which relies on the vulnerable version of OpenSSL is Android 4.1.1 (codenamed Jelly Bean). Google doesn’t break down percentages of devices at this level but according to the latest figures from Google, 34.4% the Android devices in use today are using Android 4.1.x.
Read more via ibtimes.co.uk