New fix for Playstore required

[MrPlow]

Hi SF et al.

See link here
https://support.google.com/faqs/answer/7011127

Seems another vulnerability issue found. Is there a quick way to fix this?

An edit to SDL?

Thanks

[MrPlow]

Found reference in PLatform > android > lib > libpng_gf.a file

But not sure how to go about updating - downloaded the last version of libpng 1.623

Anyone got an ideas?

[MrPlow]

Without this fix - no new updates or apps will be accepted on Playstore!
So its kind of a big deal

[spacefractal]

we will fix it, but no hurry throught. Currectly we use 1.4.2, and can only staying using 1.4.x for glbasic. 1.6 is not 100% compatible, which require some require to the glbasic loader.

But will try to update it to 1.4.19 in this summer. Should not been a bigger issue.

[MrPlow]

great thanks!
Looks like the update ban starts in September so that gives time...

[spacefractal]

Seens its compile fine with 1.4.19, but still not tested. so its just matter to update the *.c files. Glbasic source code is required to compile it with this kind of issues.

[Kitty Hello]

Send me an email, please

[spacefractal]

Im do. seens easy. Just use 1419, which seens compile fine without Recode...

[MrPlow]

Hi Guys

Any update on if this fix is coming soon...I have ~20 apps to re-compile and re-test and upload
Also I would prefer a fix that didnt force me to update my GLB version as I am currently using v12

Thanks

[Kitty Hello]

Got it. I'll upload a fix these days.

[spacefractal]

This issue was pretty much pretty simple to fix without im neede to help (14.19 is fine).

We now need to see the ip6 thing (for all platforms really, its would seen been required).  All im thinks is needed is simply just remove the net commands. Im do not have checke Apple does techincal check it or not, but more practical checking it.

Im dont see many does use those network commands with Android And iOS anyway, more on Windows. So im thinks we could remove it with DEFINE tag.

Currectly im do have focus on my Steam release, but im do ran into trouble to include steam Works correctly (also due too old gcc version).

PS. We also need to update the gcc compiler to Windows.

[Schranz0r]

PS. We also need to update the gcc compiler to Windows.

thats a pain i guess

[Kitty Hello]

Not really. Just a lot to make a new setup with a reasonable file size.

Gesendet von meinem GT-N7100 mit Tapatalk

[MrPlow]

Any update on this yet?

[Paul Smith]

looks like this has just been fixed in the v14 update.Just read that you use v12.

change log
14.329
   // Win32:
   //    KEY(cursor) was not always correct.
   // New command:
   //    BUSY - skip the next few HIBERNATE calls
   // libPNG:
   //    updated to version 1.4.19 (security issues)