Update androidx-main from Protobuf 3.19.4 to Protobuf 3.19.6 [255753711] - Issue Tracker

… >Jetpack (androidx) >

compose-ui 1.3.0 imports protobuf-javalite:3....

Update androidx-main from Protobuf 3.19.4 to Protobuf 3.19.6

Fixed

Bug

P1

Status Update

No update yet.

Description

ni...@google.com

created issue #1

Oct 26, 2022 02:36PM

As raised by to b/255545055, Profobuf versions before 3.19.6 have a security issue - CVE-2022-3171.

We should update the entire repo - b/255545055 will track any Compose uses of it.

Comments

ap...@google.com <ap...@google.com> #2Oct 28, 2022 10:31PM

Thanks! Over to Nader to take a detailed look!

au...@google.com <au...@google.com> Oct 28, 2022 10:31PM

Marked as fixed.

Reporter

ni...@google.com

Type

Priority

Severity

Status

Estimate

Access

Default access

View

Assignee

au...@google.com

Verifier

--

Collaborators

CC

au...@google.com

ni...@google.com

Code Changes

--

Pending Code Changes

--

Staffing

--

AOSP ID

--

Estimate

--

Found In

--

Targeted To

--

Verified In

--

In Prod

ReportedBy