Update curl on Android to resolve security problem cause by OpenSSL

来源:互联网 发布:会员积分软件免费版 编辑:程序博客网 时间:2024/06/06 20:11

转载于:http://www.cocos2d-x.org/news/286

Applications that use curl shift by cocos2d-x will receive a mail from google play said the application will be removed from Google Play. The content of the mail is

Hello,    One or more of your apps is running an outdated version of OpenSSL, which has multiple security vulnerabilities. You should update OpenSSL as soon as possible. For more information about the most recent security vulnerability in OpenSSL, please see http://www.openssl.org/news/secadv_20140605.txt.    Please note, while it's unclear whether these specific issues affect your application, applications with vulnerabilities that expose users to risk of compromise may be considered “dangerous products” and subject to removal from Google Play.    Regards,    Google Play Team

We have updated libcurl.a in time to resolve the issue. 
The repo cocos2d-x-3rd-party-libs-bin was updated. 
So you can use download-deps.py to update 3rd libs. But don't forget to update cocos2d-x first.

You can also download zip files of updated curl here.

I am not sure if it can pass google play or not. But we have updated OpenSSL to latest version. And we will send an application to test. You are appreciated if you can help to verify it.


0 0
原创粉丝点击