Android security fix coming, no device update necessary

Google is already hard at work to fix the security hole that affects the security of Android apps that sync with servers on the Internet. They have found a way to fix the problem without having to update users devices, which is good since 99.7% of devices (all running Android 2.3.3 and below) were affected.

Its a server-side fix Google will make its servers switch to a secure channel when syncing users data. The fix should roll out to Google servers over the next few days and affect every Android device.

The Contacts and Calendar apps were affected and this fix should make them secure. The Gallery app, which syncs online albums with Picasa, however is and will remain vulnerable after the fix (the Gallery app is developed by a third party). Google is looking into that but did not give a timeframe for fixing the Gallery hole.