question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Bump version of folly to at least 2021.07.22.00

See original GitHub issue

Description

Prior versions of folly are flagged with a security bug (CVE-2021-24036) that should not affect RN apps yet it causes noise in our 0.65 RN environment.

Version

0.65.0 -> current

Output of npx react-native info

System: OS: macOS 12.3.1 CPU: (16) x64 Intel® Core™ i9-9980HK CPU @ 2.40GHz Memory: 38.73 MB / 16.00 GB Shell: 5.8 - /bin/zsh Binaries: Node: 16.14.0 - /usr/local/bin/node Yarn: 1.22.18 - ~/workspace/MEE-PRO-EEP-UX-Client/mobile/node_modules/.bin/yarn npm: 6.14.15 - ~/workspace/MEE-PRO-EEP-UX-Client/mobile/node_modules/.bin/npm Watchman: 2022.02.28.00 - /usr/local/bin/watchman Managers: CocoaPods: 1.11.3 - /usr/local/bin/pod SDKs: iOS SDK: Platforms: DriverKit 21.4, iOS 15.4, macOS 12.3, tvOS 15.4, watchOS 8.5 Android SDK: API Levels: 23, 27, 28, 29, 30, 31 Build Tools: 29.0.2, 30.0.2, 31.0.0, 32.0.0, 32.1.0 System Images: android-28 | Google APIs Intel x86 Atom, android-28 | Google Play Intel x86 Atom, android-29 | Google APIs Intel x86 Atom, android-29 | Google Play Intel x86 Atom Android NDK: 22.1.7171670 IDEs: Android Studio: 2021.1 AI-211.7628.21.2111.8193401 Xcode: 13.3.1/13E500a - /usr/bin/xcodebuild Languages: Java: 11.0.14.1 - /usr/bin/javac npmPackages: @react-native-community/cli: Not Found react: 17.0.2 => 17.0.2 react-native: 0.65.1 => 0.65.1 react-native-macos: Not Found npmGlobalPackages: react-native: Not Found

Steps to reproduce

installing pods will fetch the IOIBuf.cpp offending file $ pod install … Installing PointrKit (6.3.5) Installing RCT-Folly (2021.04.26.00) Installing RCTRequired (0.65.1) …

Snack, code example, screenshot, or link to a repository

No response

Issue Analytics

  • State:closed
  • Created a year ago
  • Reactions:1
  • Comments:5 (2 by maintainers)

github_iconTop GitHub Comments

2reactions
fortmarekcommented, May 16, 2022

Hey, the current version of RCT-Folly is 2021.06.28.00 (see here). I would consider updating to the latest release, we don’t have any plans to release a patc for 0.65.

As a temporary measure, you can try to patch your react-native and update the version here but no guarantees the compilation will succeed.

1reaction
fortmarekcommented, May 20, 2022

Hey @berrywong2047,

I’d suggest following this comment or wait for the PR to be updated with all the necessary steps.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Bump version of folly to at least 2021.07.22.00 - bytemeta
Hey, the current version of RCT-Folly is 2021.06.28.00 (see here). I would consider updating to the latest release, we don't have any plans...
Read more >
Fedora rawhide compose report: 20210806.n.0 changes
fedoraproject.org> - 1.22.0-1 - bump to v1.22.0 * Thu Aug 05 2021 Lokesh ... Package: folly-2021.08.02.00-1.fc35 Old package: folly-2021.07.22.00-2.fc35 ...
Read more >
folly的Bump 版本至少2021.07.22.00 - 软件工程师 - 编程技术网
Bump version of folly to at least 2021.07.22.00. Description. 先前的版本的愚蠢版本用安全错误(CVE-2021-24036)标记,该错误不应影响RN应用 ...
Read more >
typo at "az vm encryption enable" - Azure/Azure-Cli - IssueHint
Bump version of folly to at least 2021.07.22.00, 5, 2022-05-12, 2022-09-25. Merge all documentation into one location, 4, 2019-01-17, 2022-10-06.
Read more >
Sunbreak - github record :)
Changelog: [Internal] Bump `babel/generator dependency` to `^7.20.0` Reviewed By: ... (1.1.1100) Installing RCT-Folly (2021.07.22.00) Installing RCTRequired ...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found