Heartbleed bug Android 4.1.1 Xperia E?

[agape]

Google has released a report that android 4.1.1is vulnerable to Heartbleed bug.
http://googleonlinesecurity.blogspot.in/2014/04/google-services-updated-to-address.html?m=1
Xperia E's latest firmware 11.3.A.2.23 runs on Android 4.1.1. Google has released a patch fix. But when is Sony going to release the patch for Xperia E's firmware?

[agape]

I used Lookout's Heartbleed detectors app, and it says the device is vulnerable. Has Sony addressed this issue officially? Why hasn't Sony yet informed its users formally?

[acemod13]

Vulnerability confirmed.

[RTB]

Bought my Experia E only a few days ago to now find that it is potentially unusable due to a flaw in the OS.

I have installed a Heartbleed detector and have confirmed that the phone is vulnerable.

It would be good to think that Sony will not leave all of the Experia E users with phones they can no longer use.

[agape]

Lookout's app says the device is vulnerable, and the KSMobile's app scans the apps on the device and says the apps are not vulnerable. How exactly the heartbleed bug in Android can be exploited is not clear yet, and what it means to have the OS vulnerable but the app not vulnerable is too not clear. We can only wait for Sony to address the issue. I have sent an email to them, and they haven't replied yet. Hope Sony hasn't killed the 1-year old Xperia E internally yet.

[agape]

The BBC has an article on the bug in android
http://m.bbc.com/news/technology-27020256
Excerpts from the article:
-HTC has confirmed that it will fix the vulnerable devices.
-Sony and Huawei have not yet made statements on the issue.
-The vulnerability on the phones can be exploited to steal credential information like banking password by designing websites or ads that can peep into the other open tabs in the browser.
So, until Sony fixes, or if Sony never fixes, users should probably refrain from using the phone for sensitive activities like banking or shopping. Use your computer instead.

[agape]

Sony has replied to my query:
"
In response to your query, we would like to
inform you that Sony Mobile Communications
have not yet identified any such kind of bugs in the latest software of your device.
However, we have taken this as a valuable
feedback and will surely look after it.
Also, we would like to inform you that
software updates are released at different times depending on operator and country. Therefore, we cannot give you an exact date for when a
specific update will be available for your
device.
"

[R0987]

So sony is just gonna ignore this arent they. This is not a simple software bug but our senitive data that is at risk

[agape · Accepted solution]

Yeah, but who cares? A responsible company would have released an official statement confirming whether the device has the bug. Sony is too busy marketing the Z series that they don't have time to care about their low end phones which are just a year old.Probably they just want to ignore the bug pretending it isn't a big deal. Just read the reply I received via e-mail, they seem to be so casual about this bug. I think there are other companies that behave more responsibly than how Sony does. How can anyone trust Sony for a smartphone again? A company's true dedication to its customers is proven only in crises like this. Sony has failed miserably.

[agape]

Just try to avoid using your phone for banking or shopping and use your computer instead whenever you can. Also mail the customer support from different countries, enquire if the device is absolutely safe, and post the replies here.