Will Solar2D consider eliminate vulnerabilities by upgrade some third-party libraries?

[clang-clang-clang]

A list of vulnerabilities can be obtained by scanning the lib/*/*.so file in the Android apk compiled from project cve-demo.tar.gz by Solar2D version 3686 with intel/cve-bin-tool. The contained vulnerabilities are summarized as follows:

Severity	Count
CRITICAL	6
HIGH	22
MEDIUM	29
LOW	3
UNKNOWN	0

Because security can only be done with effort, not foolproof, eliminating vulnerabilities may not be effective. So if related PR is welcome, we can do some upgrade on Android or all supported platforms.

[Shchvova]

Relative PRs are absolutely welcome.

[clang-clang-clang]

Ok, I'm going to keep this issue for the associated PR.

[clang-clang-clang]

After the above changes rescan CVE vulnerability:

Severity	Count
CRITICAL	0
HIGH	4
MEDIUM	9 (3 are unrelated)
LOW	0
UNKNOWN	0

Issue closed.