Known Vulnerability follyv2021.04.26.00

[chishing96]

Development Environment: React-native": "0.66.3"

folly-devel/2021.04.26.00-1.fc34/x86_64 1 Known Vulnerability

CVE-2021-24036 (BDSA-2021-2182) - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24036

Please help to fix this.

[daverigby]

As per the CVE, this issue is fixed in v2021.07.22.00 upwards.

Afiak, Folly is developed on a single-branch model, hence the solution to this CVE is to upgrade to at least the above fixed version.

[huangdamix2]

这是来自QQ邮箱的假期自动回复邮件。   你好，我最近正在休假中，无法亲自回复你的邮件。我将在假期结束后，尽快给你回复。

[eliw00d]

@daverigby What about Flipper-Folly? It is still on v2021.06.14.00. Would be nice to fix this vulnerability with a newer Flipper-Folly version with at least v2021.07.22.00.

[daverigby]

I've no idea what Flipp-Folly is; I assume some 3rd party fork? I would contact them about which version(s) of upstream facebook/folly they use...

[eliw00d]

@daverigby The CocoaPods link brings me to this GitHub repo: https://cocoapods.org/pods/Flipper-Folly. I will bring this up in the facebook/flipper repo, then.