AndroidPdfViewer icon indicating copy to clipboard operation
AndroidPdfViewer copied to clipboard

Throwing security error: Outdated "libpng" Library Contains Known Security Flaw

Open gadregit opened this issue 3 years ago • 7 comments

When I am trying to run the app via Android Studio 4.1 its throwing me a security error: Outdated "libpng" Library Contains Known Security Flaw

When I try to run the app this is what is being printed in console window. Unable to strip the following libraries, packaging them as they are: libjniPdfium.so, libjniPdfium.so, libmodft2.so, libmodft2.so, libmodpdfium.so, libmodpdfium.so, libmodpng.so, libmodpng.so.

In what update will we have secured libpng version. Thanks.

gadregit avatar Jul 21 '21 21:07 gadregit

Hi @gadregit , I am facing the same issue, have you found the solution for this issue?

hsa1280 avatar Aug 23 '21 09:08 hsa1280

Looks like this library has a depedency on PDFium, which hasn't been updated in a few years.

kvithayathil avatar Aug 30 '21 17:08 kvithayathil

Looks like this library has a depedency on PDFium, which hasn't been updated in a few years.

Yes, do you have any work around for this issue?

hsa1280 avatar Sep 01 '21 07:09 hsa1280

Hi @barteksc
Please update the version of libpng being used in PDFium to 1.6.32 or greater.

Currently libpng which PDFium uses contains a security vulnerability disclosed in CVE-2015-8540. please check here

nidhi88 avatar Oct 06 '21 07:10 nidhi88

Hi @barteksc Please update the version of libpng being used in PDFium to 1.6.32 or greater.

Currently libpng which PDFium uses contains a security vulnerability disclosed in CVE-2015-8540. please check here

Hi @nidhi88, have you found any solution for this issue?

hsa1280 avatar Dec 16 '21 06:12 hsa1280

Hi @barteksc,

We are using the latest stable version 2.8.2. We are facing some security threats as mentioned by others also. Please update the version of libpng being used in PDFium to 1.6.39 or greater.

Nivedh28 avatar Mar 24 '23 07:03 Nivedh28

Try Adding jcenter() in repositories. because this lib is not moved to mavenCentral() and jcenter() depetrecated in android studio.

repositories { jcenter() }

chiragthummar avatar Jul 11 '23 05:07 chiragthummar