Search Unity

  1. Welcome to the Unity Forums! Please take the time to read our Code of Conduct to familiarize yourself with the forum rules and how to post constructively.
  2. We have updated the language to the Editor Terms based on feedback from our employees and community. Learn more.
    Dismiss Notice

Resolved Libpng issue/vulnerability submitting app to GooglePlay Console

Discussion in 'Android' started by fgpinilla, Nov 6, 2017.

  1. fgpinilla

    fgpinilla

    Joined:
    Apr 11, 2016
    Posts:
    6
    Hi everyone,

    We are trying to release a game in the Android store, but in the APK autocheck process the feedback from Google is that the APK was rejected because we are including a version of libpng library too old. You can see the issue explanation in the link below:

    https://support.google.com/faqs/answer/7011127

    To compile we're using Unity 5.6.3p1. We try to update Unity version to the last one but this doesn't make any different result. We tried to update some plugins too, for example: GooglePlayServices plugin, AVProVideo plugin...

    We built the project using the next android build targets: 4.4 (KitKat), 5.1 (Lollipop) and 7.0&7.1 (Nougat) with the same bad result.

    In the project we're using the function EncodeToPNG() from Unity. We're trying to change this to JPG to see if something change...

    About the build process, we're using the integrated Unity process to make the APK. We use the splitted APK option to generate spearated OBB files.

    Any clue or advice will help us a lot :)

    Thanks in advance!
     
  2. nat42

    nat42

    Joined:
    Jun 10, 2017
    Posts:
    353
  3. CarlosCG

    CarlosCG

    Joined:
    Dec 13, 2016
    Posts:
    4
    Hi nat42, we had a mistake with the account used. The other one is old, we're trying to delete it. I'm so sorry about that issue :(
     
  4. HyungonKim

    HyungonKim

    Joined:
    Mar 11, 2018
    Posts:
    11
    Did you solve this???
     
  5. CreepyLamppost

    CreepyLamppost

    Joined:
    Jun 26, 2017
    Posts:
    19
    I too ran into this. Is there a way to check which version of libpng Unity is using in its build? Or is it more Android settings?
     
  6. TrentSterling

    TrentSterling

    Joined:
    Jan 4, 2013
    Posts:
    97
    Gonna bump this as I'm seeing all my applab stuff coming up with this libpng vulnerability!
     
  7. CreepyLamppost

    CreepyLamppost

    Joined:
    Jun 26, 2017
    Posts:
    19
    I too need an answer to this. Other places have suggested upgrading the Unity version, but I upgraded to 2020.3.13f1 and that still didn't fix the issue. I'm hesitant to upgrade again as that was a lot of work, but others have found success migrating to 2022. I'd love to have a different solution to this problem though.
     
  8. manugil

    manugil

    Unity Technologies

    Joined:
    Jan 13, 2020
    Posts:
    41
    Libpng was updated to 1.6.37 in 2020.3.26f1, any release after that one should include the fix for CVE-2019-7317.