Skip to content

[QUERY] io.netty transient dependencies #49215

@Zileon

Description

@Zileon

Query/Question
When a new version of com.azure:azure-core-http-netty will be released. There are multiple vulnerabilities even in the latest 1.16.4 version beacuse of usage of io.netty dependencies.

I'm mostly interested in following libraries:
com.azure:azure-storage-blob
com.azure:azure-messaging-servicebus
com.azure:azure-identity

Is there any estimated timeline of upgrading azure-core-http-netty and subsequent libraries

Metadata

Metadata

Assignees

Labels

Azure.Coreazure-coreHttpClientcustomer-reportedIssues that are reported by GitHub users external to the Azure organization.needs-team-attentionWorkflow: This issue needs attention from Azure service team or SDK teamquestionThe issue doesn't require a change to the product in order to be resolved. Most issues start as that

Type

No type
No fields configured for issues without a type.

Projects

Status

No status

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions