search

ValveSoftware / halflife

Half-Life 1 engine based games
Other
3.7k stars 624 forks source link

[Linux] Requires old libgcrypt (1.5.6) and old libpng (1.2.59) #2588

Open shoober420 opened 5 years ago

shoober420 commented 5 years ago

Please update GoldSrc to use the up to date libgcrypt (1.8.4) and libpng (1.6.37), instead of the legacy versions (1.5.6 and 1.2.59). Thank you.

shoober420 commented 5 years ago

Legacy libpng vulnerabilities.

https://www.cvedetails.com/vulnerability-list/vendor_id-7294/Libpng.html

Legacy libgcrypt vulnerabilities.

https://www.cvedetails.com/vulnerability-list/vendor_id-4711/product_id-25777/Gnupg-Libgcrypt.html