您的位置:首页 > 移动开发 > Android开发

Update curl on Android to resolve security problem cause by OpenSSL

2015-06-11 18:48 501 查看
转载于:http://www.cocos2d-x.org/news/286

Applications that use curl shift by cocos2d-x will receive a mail from google play said the application will be removed from Google Play. The content of the mail is
Hello,

One or more of your apps is running an outdated version of OpenSSL, which has multiple security vulnerabilities. You should update OpenSSL as soon as possible. For more information about the most recent security vulnerability in OpenSSL, please see http://www.openssl.org/news/secadv_20140605.txt. 
Please note, while it's unclear whether these specific issues affect your application, applications with vulnerabilities that expose users to risk of compromise may be considered “dangerous products” and subject to removal from Google Play.

Regards,
Google Play Team


We have updated libcurl.a in time to resolve the issue.

The repo cocos2d-x-3rd-party-libs-bin was
updated.

So you can use
download-deps.py
to
update 3rd libs. But don't forget to update cocos2d-x first.

You can also download zip files of updated curl here.

I am not sure if it can pass google play or not. But we have updated OpenSSL to latest version. And we will send an application to test. You are appreciated if you can help to verify it.
内容来自用户分享和网络整理,不保证内容的准确性,如有侵权内容,可联系管理员处理 点击这里给我发消息
标签: