Sign up Calendar Latest Topics
 
 
 


Reply
  Author   Comment  
Martin

Avatar / Picture

Administrator
Registered:
Posts: 2,230
Reply with quote  #1 
Hey guys. Hope everyone is doing well. Just posting this new email from google play today about an update needed for all new apps or app updates. It doesn't look like anything urgent, just needs to be considered when making new games or updates going forward.

Here's the email:

Hello Google Play Developer,

We detected that your app(s) listed at the end of this email are using an unsafe version of the libpng library. Apps with vulnerabilities like this can expose users to risk of compromise and may be considered in violation of our Malicious Behavior policy.

What’s happening

Beginning September 17, 2016, Google Play will block publishing of any new apps or updates that use vulnerable versions of libpng. Your published APK version will not be affected, however any updates to the app will be blocked unless you address this vulnerability.

Action required: Migrate your app(s) to use libpng v1.0.66, v.1.2.56, v.1.4.19, v1.5.26 or higher as soon as possible and increment the version number of the upgraded APK.

Next steps
Download the latest version of libpng from the libpng website.
Sign in to your Developer Console and submit the updated version of your app.
Check back after five hours - we’ll show a warning message if the app hasn’t been updated correctly.
The vulnerability stems from an out of bounds memory access that could potentially lead to code execution. Versions 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 are affected.

You can read more about the vulnerability in CVE-2015-8540. For other technical questions about the vulnerability, you can post to Stack Overflow and use the tag “android-security.”

While these specific issues may not affect every app that uses libpng, it’s best to stay up to date on all security patches.

We’re here to help

If you feel we have sent this warning in error, you can contact our developer support team.

Regards,

The Google Play Team

0
stargamesryk

Member
Registered:
Posts: 59
Reply with quote  #2 
martin i received email about using "URL" in my games i will post full mail here soon
0
Martin

Avatar / Picture

Administrator
Registered:
Posts: 2,230
Reply with quote  #3 
Ok [thumb]
0
Mohammed

Junior Member
Registered:
Posts: 27
Reply with quote  #4 
@stargemesrky. you shouldn't put links inside your game even for reviewing the game. you should use the game package name to take the player to the rating page directly.

@Martin. Hi Martin. Can u please check howtomakemobilegames@gmail.com 

thanks
0
bestgamesstudios

Avatar / Picture

Senior Member
Registered:
Posts: 535
Reply with quote  #5 
Wait - But what about privacy policies! I have a privacy policy button that links to the online privacy policies - now google is just contradicting itself
__________________
https://play.google.com/store/apps/developer?id=Best+Games+Studios
Diary: http://www.howtomakemobilegames.com/post/best-games-studios-diary-7386298?pid=1288723175
0
Previous Topic | Next Topic
Print
Reply

Quick Navigation:

Easily create a Forum Website with Website Toolbox.