Page 1 of 1

How to fix apps containing Libpng Vulnerability

Posted: Fri Jul 08, 2016 7:16 am
by LeGiangAnh
Hi all,

I got this message for my Android game from Google Play:
"Your app is using a version of libpng containing a security vulnerability. Please see this Google Help Center article for details, including the deadline for fixing the vulnerability."
https://support.google.com/faqs/answer/7011127

Does any one know how to solve it in Irrlicht? The previous programmer quit and I have just joined this project.

Thanks.

Re: How to fix apps containing Libpng Vulnerability

Posted: Fri Jul 08, 2016 8:30 am
by CuteAlien
Irrlicht ogl-es branch recently got updated to libpng 1.6.21. But I just looked and libpng was updated to 1.6.23 since then. Guess I'll have to update it once more in Irrlicht (will do over the weekend). Thought those versions don't seem to be about security problems - if I read it correct last one with open security problems was 1.6.19.

So basically - update your Irrlicht version to newest version of the ogl-es branch in Irrlicht's svn server.
Recompile. Do whatever you have to do in your project to build a new version (can't help with that as it's project specific).

Or wait 2-3 more days - unless I run into unexpected problems (might happen...) I'll update it to latest libpng by then.

edit: Hm, I also use old libpng in my game on google-play, but got no message yet. Generally shouldn't cause a problem unless users can set their own png's.

Re: How to fix apps containing Libpng Vulnerability

Posted: Sat Jul 09, 2016 9:47 am
by CuteAlien
Ogl-es branch has now been updated to libpng 1.6.23