search

DImuthuUpe / AndroidPdfViewer

Android view for displaying PDFs rendered with PdfiumAndroid
Apache License 2.0
8.18k stars 1.91k forks source link

Throwing security error: Outdated "libpng" Library Contains Known Security Flaw #1023

Open gadregit opened 3 years ago

gadregit commented 3 years ago

When I am trying to run the app via Android Studio 4.1 its throwing me a security error: Outdated "libpng" Library Contains Known Security Flaw

When I try to run the app this is what is being printed in console window. Unable to strip the following libraries, packaging them as they are: libjniPdfium.so, libjniPdfium.so, libmodft2.so, libmodft2.so, libmodpdfium.so, libmodpdfium.so, libmodpng.so, libmodpng.so.

In what update will we have secured libpng version. Thanks.

hsa1280 commented 3 years ago

Hi @gadregit , I am facing the same issue, have you found the solution for this issue?

kvithayathil commented 3 years ago

Looks like this library has a depedency on PDFium, which hasn't been updated in a few years.

hsa1280 commented 3 years ago

Looks like this library has a depedency on PDFium, which hasn't been updated in a few years.

Yes, do you have any work around for this issue?

nidhi88 commented 3 years ago

Hi @barteksc
Please update the version of libpng being used in PDFium to 1.6.32 or greater.

Currently libpng which PDFium uses contains a security vulnerability disclosed in CVE-2015-8540. please check here

hsa1280 commented 2 years ago

Hi @barteksc Please update the version of libpng being used in PDFium to 1.6.32 or greater.

Currently libpng which PDFium uses contains a security vulnerability disclosed in CVE-2015-8540. please check here

Hi @nidhi88, have you found any solution for this issue?

Nivedh28 commented 1 year ago

Hi @barteksc,

We are using the latest stable version 2.8.2. We are facing some security threats as mentioned by others also. Please update the version of libpng being used in PDFium to 1.6.39 or greater.

chiragthummar commented 1 year ago

Try Adding jcenter() in repositories. because this lib is not moved to mavenCentral() and jcenter() depetrecated in android studio.

repositories { jcenter() }