- Home /
Problem is not reproducible or outdated
Google Play libpng security alert
Hi, We' received an security alert for all of our apps built using unity3d pro 5.2.4 in google play. following is the message. can anyone kindly let us know how to fix this?
Security alert
Your app is using a version of libpng containing a security vulnerability. Please see this Google Help Center article for details, including the deadline for fixing the vulnerability.
this is the link for google help center article. https://support.google.com/faqs/answer/7011127 Thanks
We have also had this warning for an app built with Unity 4.6.* that remains live on the store.
Last version on Unity 4 was 4.7.2 which I suspect doesn't have a newer libpng version, and I believe Unity are reticent to do any more updates (though I note 4.7.1 and 4.7.2 came out after the "final" build...)
Which does beg the question is it possible to transplant a newer libpng without the engine source code?
For example is there a way to export to Android studio and do it from there?
Hi Twistplay, we have published some test builds in google play, and with unity 5.3.4, I see no security alerts yet(It has been almost one and half day). I have used opencv for unity plugin in my app which got this libpng security alert. I've contacted the author of this plugin. I'll let you know if this alert is caused by using that plugin cause it has dependencies on libpng. I guess some of your plugins might be causing this for your app. can I know what are the plugins you're using?
Easy $$anonymous$$ovie Texture, SQLite, Android Native Plugin, Soomla, Parse
Only the first two have any native bits associated with them (i.e. have .so files), those that are .JAR or $$anonymous$$ono/.NET .DLL files I assume wouldn't link to libpng directly. I'm still assu$$anonymous$$g it's Unity itself though rather than the plugins.
Answer by HOW R U · Jun 18, 2016 at 05:45 AM
Change the version to higher EXAMPLE if u r using 1.2.4, change to 1.2.44.
Hi HOW R U, appreciate your time for responding to my question. but can you please explain how can upgrade the libpng version ?