Android libpng security issue

Update (22/07/2016) The updated version of LibPNG can be found in Early Access 1.99.493 now.  If you are still experiencing this issue make sure you are on this version and also let us know if you are.

We are aware of an issue with the version of libpng that GameMaker uses and that fact that all Android app creators are being informed of this issue by Google and linked to a support article containing the following message:

"Please migrate your app(s) to libpng v1.0.66, v.1.2.56, v.1.4.19, v1.5.26 or higher as soon as possible and increment the version number of the upgraded APK. Beginning Sep 17, 2016, Google Play will block publishing of any new apps or updates that use vulnerable versions of libpng. Your published app version will remain unaffected, however any updates to the app will be blocked unless they address this vulnerability."

We are aware of this and our development team are working on updating all necessary components to release an update.

When this update is complete it will be part of a new version, which means that in order to publish to Google Play from September 17th 2016 you will need to update to the latest version.

(20/06/16) Our version of libpng has been updated and has now entered the first stage of testing. There is no release date for the fix yet but it will be available soon. We will be updating the progress of the fix when new information becomes available.

Have more questions? Submit a request

34 Comments

  • Avatar
    Yusup Suparman

    thanks you for your fast response and hope the issue will solved ASAP

  • Avatar
    Juliano Lima

    Thanks!

  • Avatar
    Tom Traggis

    Thank you very much for the fast response to this issue, looking foreward to the new release

  • Avatar
    Yusup Suparman

    Hello kevin

    I read from bug.yoyogames.com if this issue is solved,  is it right ? 

     

     

  • Avatar
    Yusup Suparman
  • Avatar
    Allen Nurihan Sohn

    Thank you. Will steam GM users get this new update at same time?

  • Avatar
    Kevin

    @Yusup, The version of libpng has been updated by our development team and testing has started to ensure that updating the version of libpng is the only change that needs to be made in order to allow Google to accept game submissions. This fix is not available yet as it is still being tested internally, the status of the bug only shows that a fix has been created.

    @Allen, The new version of GameMaker will be available for both Standalone and Steam users at the same time.

  • Avatar
    Omar Rehman

    Thanks Kevin for the update. Hope to have the updated version with the fix soon. Good luck.

  • Avatar
    Orcadevelopement

    Will there be any way to fix this without updating to a newer version of game maker ?

    My game is live on the Google Play Store and im currently using v.1.4.1474 because every version since has introduced a memory leak crashing my game.
    http://help.yoyogames.com/hc/en-us/requests/108100

    I am confident this memory leak will be fixed, but just in case it isnt by september I wanted to know if it is something that can be done manually.

  • Avatar
    Juliano Lima

    @Orcadevelopement, this is true. I had some issues with newer versions of Game Maker too. I'm using v1.4.1657 (Steam).

    If there is a way too update libpng without updating all Game Maker would be very nice!

  • Avatar
    Tovidi

    Already solved the problem I have to do updates and can not

     

  • Avatar
    rami

    Do you have any information about the release date of this new version? What does soon mean for you? Several weeks, several months?

    My team and I are stuck on the release of a project with this issue. We can't organize the release until we don't have any information on a release of a fix. And it's impossible to release a game if there is any chance that you don't release a fix before the date Google give to us to change libpng version.

    Thanks for any information about this issue.

    Thanks for your great job.

    Edited by rami
  • Avatar
    Jona Bleibtreu

    Please Updatet it !!

  • Avatar
    Juliano Lima

    I update it last thursday. I rebuild my games and sent to Google Play last friday, and everything looks alright now. The warning message has gone in all my games. 

    I had also received a warning about IAP method that was out of date, and it was also solved with this latest version of Game Maker (v1.99.493).

    I needed to make some adaptations, especially related to Google Play Services because I was using version v1.4.1657. I also noticed a small decrease in the number of devices compatible with the new builds of my games. But in general are older devices that lost compatibility, while maintaining API 9 support.

    Anyway the problem with the libpng was apparently fully solved.

    Thanks GM team!

    Edited by Juliano Lima
  • Avatar
    Omar Rehman

    Hi,

    The issue seems to be resolved. I submitted a beta version of my game which had a warning before and the newest version released through early access GM (v1.99.493) didn't get any warning from Google.

     

    Cannot yet comment about the  new IAP warning though. 

    Thanks GM Team.

  • Avatar
    Paulo Almeida

    How can i fix this error? Do i need to update my gms version?

  • Avatar
    Taj Max

    Hi, I'm still having this problem, Can you pleas tell me when the update will be available ? Thanks!

  • Avatar
    Kevin

    A fix for this issue is in Early Access and it will be moving towards our stable build after it is fully tested and verified.

    @Paulo: There is nothing for you to do to fix this issue, the fix is on our side. When the fix is fully released you will have to update the the latest version.

    @Taj:We don't have a set date that this fix will be available outside of Early Access but it will be ahead of the cutoff date.

  • Avatar
    Jake Reardon

    It sounds like this should be in the stable branch before the Sept 17th cutoff? I tried using Early access and it broke my build process. 

  • Avatar
    LuxeGames

    @Kevin They managed to move forward with this error? I do not know what to do.
    On the other hand, projects in the version "early acces" will continue to operate at or have any incompatibility? please answer me here and to email: luxetecnogames@gmail

  • Avatar
    Jesse Sopanen

    Is there yet any ETA for this fix for stable version?

  • Avatar
    ANTONIO ROMAN MARTIN

    If I 've got a small solution that will at least serve to me that games are not removed from playstore . But even continuous error if the game requires APK Expansion. You have to look at this problem !!!

  • Avatar
    Michael Laskowski

    Google today refused to accept the updated .apk due to libpng, I'm not on a tight deadline, a week delay is not the end of the world, but for some it may be a dealbreaker. Please, treat it with urgency.

    GM ver 1.4.1757

  • Avatar
    LuxeGames

    SOLUTION - EVERYBODY - 

    Download the beta version of GMStudio 1.4.1760 and its done! 

     

    Regards

  • Avatar
    Mr DD

    @LuxeGames

    No - 1.4.1760 is not solution. 

    Its not stable. Applications are crashing after few minutes.

     

    EDIT:

    Its crash, due to Adds. You need to update Extension as well. 

     

    Edited by Mr DD
  • Avatar
    Juliano Lima

    I'm using the early access version (v1.99.505) and it's working fine too.

    To me, it was necessary made some updates on extensions, like @Mr DD said, but now everything is working pretty well.

  • Avatar
    Jesse Sopanen

    Have you guys heard any news from the staff yet when it's going to stable version?

    Is Early Access separate installation or can I "update" Early Access back to stable version if stuff doesn't work with that? I could try to install Early Access and see if that works.

  • Avatar
    Juliano Lima

    @Jesse Sopanen,

    If you are using the Steam version, you will update your actual version of Game Maker, but you can return to stable or beta versions any time you want.

    And if you use the YoYo's site version, you will need to install separately and you can keep your actual version of Game Maker.

    On both cases you can return to a stable or beta versions. 

  • Avatar
    Jesse Sopanen

    Thanks @Juliano. That's great. I will install Early Access then.

  • Avatar
    Juliano Lima

    @Jesse Sopanen,

    You're welcome!

Please sign in to leave a comment.
Powered by Zendesk