Wednesday, March 5, 2008

Android SDK Updated to m5-rc15

A new version of the SDK is out, m5-rc15. It is another update in the process of transitioning from M3 to M5 version and now includes all the changes mentioned in the documentation when m5-rc14 was released. The update doesn't introduce any new API and does not require you to update the Eclipse ADT plugin.

The primary reason of this release is to fix a vulnerability in the handling of images. This security issue was
reported by Alfredo Ortega from Core Security Technologies. It was reported that a vulnerability in the handling of images allowed complete control of the phone. The vulnerability had been identified to cause heap and integer overflow while handling GIF, PNG, BMP images.

No comments: