The Thriller with the bug heartbleed, to be continued. It seems not only web pages and routers that are vulnerable to the Heartbleed bug but also some models of the operating Android.
As Google posted on its Heartbleed blog, it also exists on Appliances running on Android 4.1.1 Jelly Bean. The company added that it will distribute security updates to manufacturers. Vulnerability in Android is a very serious issue as updates are usually delayed by the manufacturers.
We do not know the exact number of phones still running Android 4.1.1, as it is almost impossible to determine. Although Google reports that 34,4% of Android devices run Android Jelly Bean, it cannot determine the percentage of users in the various versions of the operating system - 4.1.1 or 4.1.2.
The latest version of Android Jelly Bean is 4.1.2 and was released in October of 2012.
One millionfaceς της Google δήλωσε στο Bloomberg ότι υπάρχουν “millions” devices running Android 4.1.1.
Google previously promised to immediately release an update that will fix the Heartbleed bug, but even if the company does so immediately, millions of devices will probably remain vulnerable for a long time. The event comes to remind us of Android's big problem: While updates are issued regularly, the responsibility of distribution is in the hands of hundreds of device vendors. Android updates should initially be released by its manufacturer devices, and will often need to be approved by mobile network providers. The only exceptions are devices manufactured by Google itself, such as the Nexus series and the Google Play mobile versions.
