URGENT: Critical libwebp Vulnerability Patch for Neos

Neos uses a library called FreeImage which is impacted by a critical libwebp vulnerability (CVE-2023-5129 / CVE-2023-4863). Frooxius has patched FreeImage and has provided the source code on the YDMS GitHub. https://github.com/Yellow-Dog-Man/FreeImage

(If you dont trust a random user on steam you can check the discord aswell or the official telegram channel)

Below you will find a copy of FreeImage.dll which has been compiled from the patched source above. You must replace all copies of the FreeImage.dll file in your copy of Neos in order to mitigate the vulnerability. Alternatively, you may use the FreeImage.dll file from your Beta copy of Resonite.

We highly recommend that you apply this patch immediately before using Neos.

Patch Instructions for Steam

Open the Steam Library page for Neos, then click on the gear and choose Manage -> Browse local game files.
Overwrite the FreeImage.dll file located in the following paths with the patched dll.


Neos_Data\Plugins\x86_64
Tools
Tools\AdminX
Tools\Minecraft2Neos

Patch Instructions for Standalone (downloaded from neos.com)

Browse to the install path of your Neos standalone, substitute C:\Neos with the path you installed Neos to.
Overwrite the FreeImage.dll file located in the following paths with the patched dll.


C:\Neos
C:\Neos\app\Neos_Data\Plugins\x86_64
C:\Neos\app\Tools
C:\Neos\app\Tools\AdminX
C:\Neos\app\Tools\Minecraft2Neos

Special thanks to @74hc595 for compiling the patched FreeImage.dll