search

CameraKit / camerakit-android

Library for Android Camera 1 and 2 APIs. Massively increase stability and reliability of photo and video capture on all Android devices.
https://camerakit.io
MIT License
5.36k stars 880 forks source link

Update libjpeg-turbo #378

Open steeve opened 6 years ago

steeve commented 6 years ago

Is this a bug report?

Not really.

Have you read the Contributing Guidelines?

Yes

Environment

Android 21

Description

Currently CameraKit ships with libjpeg-turbo=1.4.1 which has a critical vulnerability [1]. Since the .a are committed directly on this repo, perhaps the best course of action would be to update it officially to at least version 1.5.0.

Thanks!

[1] https://support.google.com/faqs/answer/7008337?hl=en

austinkettner commented 6 years ago

Roger that, will ensure 1.0.0 doesn't ship with 1.4.x