Time to Update to Flex SDK 3.5a

If you are using a Flex SDK before 3.5a then it’s probably time to update. Flex SDKs before 3.4 have a security vulnerability. I believe the problem is actually in the HTML template, so when you update make sure that you also update the HTML templates that you are using. The Flex SDK 3.4 had the double responder bug. And the initial release of Flex SDK 3.5 had a bug with AIR’s ApplicationUpdaterUI. If you overlay your own AIR SDK on top of the Flex SDK then be aware that you will actually be overwriting the ApplicationUpdaterUI fix (comments in the bug report discuss how to deal with that).

So it’s time to move to the latest Flex SDK 3.5a!

Also, if you are using BlazeDS, LCDS, or FDS then it’s time to update that as well due to a security vulnerability that was published yesterday.

This entry was posted in Adobe AIR, BlazeDS, Flex. Bookmark the permalink. Post a comment or leave a trackback: Trackback URL.

8 Comments

  1. Tom Gruszowski
    Posted February 12, 2010 at 2:02 pm | Permalink

    3.5 is FINALLY a good SDK. It’s been quite frustrating how many regressions bugs came up with 3.4 to the point where we had to revert one app to 3.3. 3.2 was not even something to consider. I hope we can get better automated tests for Flex 4 but that is really wishful thinking until Flex 4.5 or so. This type of stuff just doesn’t happen with Java/.NET

  2. Posted February 13, 2010 at 1:00 pm | Permalink

    Anyway I didn’t like how this 3.5a was released, the build number has been kept the same, I would have preferred a 3.5.1, that’s what major.minor.bugfix versions are meant for.

  3. Posted February 13, 2010 at 1:05 pm | Permalink

    @magomarcelo The reason that I heard for why they didn’t change the build number was that then they would have had to create new Framework RSLs.

  4. Posted February 13, 2010 at 9:31 pm | Permalink

    Note that 3.5 has a problem with ComboBoxes. I found this out after updating to 3.5. The other developer wasn’t seeing the issue and I eventually realized he was still on 3.4. A google search showed that others were reporting it in the forums.

  5. Posted February 14, 2010 at 1:35 pm | Permalink

    @Jamie That’s a bummer. Looks like it is fixed for 3.6.

  6. Posted May 31, 2010 at 2:28 am | Permalink

    hello, i user the sdk of framework_3.4.1.10084.swz, but i found it that can’t cache in the flash player AssetCache?

    you know why? thanks

  7. Posted May 31, 2010 at 7:19 pm | Permalink

    no error, and i back to the framework_3.4.0.9271 that can cache in the flash player AssetCache. i don’t trust the sdk 3.6

Post a Comment

Your email is never published nor shared. Required fields are marked *

*
*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong> <pre lang="" line="" escaped="">

Subscribe without commenting