Bump version of folly to at least 2021.07.22.00
See original GitHub issueDescription
Prior versions of folly are flagged with a security bug (CVE-2021-24036) that should not affect RN apps yet it causes noise in our 0.65 RN environment.
Version
0.65.0 -> current
Output of npx react-native info
System: OS: macOS 12.3.1 CPU: (16) x64 Intel® Core™ i9-9980HK CPU @ 2.40GHz Memory: 38.73 MB / 16.00 GB Shell: 5.8 - /bin/zsh Binaries: Node: 16.14.0 - /usr/local/bin/node Yarn: 1.22.18 - ~/workspace/MEE-PRO-EEP-UX-Client/mobile/node_modules/.bin/yarn npm: 6.14.15 - ~/workspace/MEE-PRO-EEP-UX-Client/mobile/node_modules/.bin/npm Watchman: 2022.02.28.00 - /usr/local/bin/watchman Managers: CocoaPods: 1.11.3 - /usr/local/bin/pod SDKs: iOS SDK: Platforms: DriverKit 21.4, iOS 15.4, macOS 12.3, tvOS 15.4, watchOS 8.5 Android SDK: API Levels: 23, 27, 28, 29, 30, 31 Build Tools: 29.0.2, 30.0.2, 31.0.0, 32.0.0, 32.1.0 System Images: android-28 | Google APIs Intel x86 Atom, android-28 | Google Play Intel x86 Atom, android-29 | Google APIs Intel x86 Atom, android-29 | Google Play Intel x86 Atom Android NDK: 22.1.7171670 IDEs: Android Studio: 2021.1 AI-211.7628.21.2111.8193401 Xcode: 13.3.1/13E500a - /usr/bin/xcodebuild Languages: Java: 11.0.14.1 - /usr/bin/javac npmPackages: @react-native-community/cli: Not Found react: 17.0.2 => 17.0.2 react-native: 0.65.1 => 0.65.1 react-native-macos: Not Found npmGlobalPackages: react-native: Not Found
Steps to reproduce
installing pods will fetch the IOIBuf.cpp offending file $ pod install … Installing PointrKit (6.3.5) Installing RCT-Folly (2021.04.26.00) Installing RCTRequired (0.65.1) …
Snack, code example, screenshot, or link to a repository
No response
Issue Analytics
- State:
- Created a year ago
- Reactions:1
- Comments:5 (2 by maintainers)
Top GitHub Comments
Hey, the current version of
RCT-Folly
is2021.06.28.00
(see here). I would consider updating to the latest release, we don’t have any plans to release a patc for0.65
.As a temporary measure, you can try to patch your
react-native
and update the version here but no guarantees the compilation will succeed.Hey @berrywong2047,
I’d suggest following this comment or wait for the PR to be updated with all the necessary steps.