Skip to content

Commit e896d21

Browse files
owjsubkelset
authored andcommitted
Android: upgrading OkHttp from 4.9.1 to 4.9.2 to fix CVE-2021-0341 (#32968)
Summary: Security vulnerability CVE-2021-0341 is present in okhttp 4.9.1. Upgrading to 4.9.2 will resolve the issue. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-0341 ## Changelog [Android] [Security] - Upgraded okhttp to 4.9.2 to fix CVE-2021-0341 Pull Request resolved: #32968 Test Plan: Upgrading okhttp 4.9.1 to 4.9.2 should be backwards compatible per https://github.com/square/okhttp/blob/master/CHANGELOG.md#version-492. Should be safe to merge if CircleCI tests pass. Reviewed By: ShikaSD Differential Revision: D33788131 Pulled By: cortinico fbshipit-source-id: e9593a42a8e40a903ee6f529d94c82adcf5d0977 # Conflicts: # ReactAndroid/gradle.properties
1 parent ac810c0 commit e896d21

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

ReactAndroid/gradle.properties

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ JUNIT_VERSION=4.12
1212

1313
ANDROIDX_TEST_VERSION=1.1.0
1414
FRESCO_VERSION=2.5.0
15-
OKHTTP_VERSION=4.9.1
15+
OKHTTP_VERSION=4.9.2
1616
SO_LOADER_VERSION=0.10.1
1717

1818
BOOST_VERSION=1_63_0

ReactAndroid/src/main/third-party/java/okhttp/BUCK

+4-4
Original file line numberDiff line numberDiff line change
@@ -30,8 +30,8 @@ rn_prebuilt_jar(
3030

3131
fb_native.remote_file(
3232
name = "okhttp3-binary.jar",
33-
sha1 = "51215279c3fe472c59b6b7dd7491e6ac2e28a81b",
34-
url = "mvn:com.squareup.okhttp3:okhttp:jar:4.9.1",
33+
sha1 = "5302714ee9320b64cf65ed865e5f65981ef9ba46",
34+
url = "mvn:com.squareup.okhttp3:okhttp:jar:4.9.2",
3535
)
3636

3737
rn_prebuilt_jar(
@@ -41,6 +41,6 @@ rn_prebuilt_jar(
4141

4242
fb_native.remote_file(
4343
name = "okhttp3-urlconnection-binary.jar",
44-
sha1 = "f45e809215bd0961350148cf5b78707865084e6f",
45-
url = "mvn:com.squareup.okhttp3:okhttp-urlconnection:jar:4.9.1",
44+
sha1 = "3b9e64d3d56370bc7488ed8b336d17a8013cb336",
45+
url = "mvn:com.squareup.okhttp3:okhttp-urlconnection:jar:4.9.2",
4646
)

0 commit comments

Comments
 (0)