How to fix apps containing Libpng Vulnerability

You are an experienced programmer and have a problem with the engine, shaders, or advanced effects? Here you'll get answers.
No questions about C++ programming or topics which are answered in the tutorials!
Post Reply
LeGiangAnh
Posts: 1
Joined: Fri Jul 08, 2016 4:56 am

How to fix apps containing Libpng Vulnerability

Post by LeGiangAnh »

Hi all,

I got this message for my Android game from Google Play:
"Your app is using a version of libpng containing a security vulnerability. Please see this Google Help Center article for details, including the deadline for fixing the vulnerability."
https://support.google.com/faqs/answer/7011127

Does any one know how to solve it in Irrlicht? The previous programmer quit and I have just joined this project.

Thanks.
CuteAlien
Admin
Posts: 9629
Joined: Mon Mar 06, 2006 2:25 pm
Location: Tübingen, Germany
Contact:

Re: How to fix apps containing Libpng Vulnerability

Post by CuteAlien »

Irrlicht ogl-es branch recently got updated to libpng 1.6.21. But I just looked and libpng was updated to 1.6.23 since then. Guess I'll have to update it once more in Irrlicht (will do over the weekend). Thought those versions don't seem to be about security problems - if I read it correct last one with open security problems was 1.6.19.

So basically - update your Irrlicht version to newest version of the ogl-es branch in Irrlicht's svn server.
Recompile. Do whatever you have to do in your project to build a new version (can't help with that as it's project specific).

Or wait 2-3 more days - unless I run into unexpected problems (might happen...) I'll update it to latest libpng by then.

edit: Hm, I also use old libpng in my game on google-play, but got no message yet. Generally shouldn't cause a problem unless users can set their own png's.
IRC: #irrlicht on irc.libera.chat
Code snippet repository: https://github.com/mzeilfelder/irr-playground-micha
Free racer made with Irrlicht: http://www.irrgheist.com/hcraftsource.htm
CuteAlien
Admin
Posts: 9629
Joined: Mon Mar 06, 2006 2:25 pm
Location: Tübingen, Germany
Contact:

Re: How to fix apps containing Libpng Vulnerability

Post by CuteAlien »

Ogl-es branch has now been updated to libpng 1.6.23
IRC: #irrlicht on irc.libera.chat
Code snippet repository: https://github.com/mzeilfelder/irr-playground-micha
Free racer made with Irrlicht: http://www.irrgheist.com/hcraftsource.htm
Post Reply