Android 4.4.4 is rolling out to devices; contains OpenSSL fix

Google has a surprise for us today in the form of a new (minor) version of Android. Android 4.4.4 is rolling out to Nexus devices and is available for download on the Nexus Factory Image page. A changelog available over at Sprint lists nothing other than "security fixes."

Sascha Prüter, an Android Engineering Program Manager, posted on Google+ that the update is "Primarily addressing CVE-2014-0224," which is a flaw discovered in OpenSSL after Heartbleed was widely publicized. Prüter says the update addresses "some other (not quite as severe) security issues" and that an AOSP code drop should happen in "the next 48h."

4.4.4 comes hot on the heels of 4.4.3, which came out earlier this month.

Read on Ars Technica | Comments