# ITK libpng version
**URL:** https://discourse.itk.org/t/itk-libpng-version/2802
**Category:** Uncategorized
**Created:** [March 9, 2020, 2:48pm UTC](https://discourse.itk.org/t/itk-libpng-version/2802 "2020-03-09T14:48:41Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Fijoy\_Vadakkumpadan](https://discourse.itk.org/u/Fijoy_Vadakkumpadan)
#### Post date: [March 9, 2020, 2:48pm UTC](https://discourse.itk.org/t/itk-libpng-version/2802/1 "2020-03-09T14:48:41Z")
Hello,
What version of libpng does ITK use?
I’m trying to resolve the (security) vulnerabilities associated with libpng by updating ITK to the latest version. But looking at the source (Modules/ThirdParty/PNG/itkpng/pngconf.h), both for the ITK version I currently have (4.10.1) and the latest version (5.0.1), it seems ITK has been using libpng version 1.6.9 from 2014. Can someone confirm? If yes, are there any plans to update the underlying libpng version to the latest (1.6.37) which has no known vulnerabilities?
Thanks.
---
### Author:  [@dzenanz](https://discourse.itk.org/u/dzenanz)
#### Post date: [March 9, 2020, 3:15pm UTC](https://discourse.itk.org/t/itk-libpng-version/2802/2 "2020-03-09T15:15:37Z")
There is an update script for libPNG, I am executing it now.
---
### Author:  [@dzenanz](https://discourse.itk.org/u/dzenanz)
#### Post date: [March 9, 2020, 4:00pm UTC](https://discourse.itk.org/t/itk-libpng-version/2802/3 "2020-03-09T16:00:57Z")
I manually resolved minor merge conflicts. I tried compiling and running PNG IO unit tests in Debug mode and all was fine. [PR1689](https://github.com/InsightSoftwareConsortium/ITK/pull/1689).