Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

APPSEC-4267: update azure-identity to 1.12.2 #622

Open
wants to merge 1 commit into
base: 7.0.x
Choose a base branch
from

Conversation

janjwerner-confluent
Copy link
Member

Update azure identity to resolve CVE-2024-35255

@trnguyencflt
Copy link
Member

trnguyencflt commented Jun 19, 2024

@janjwerner-confluent could you please check if this version of azure-identity match the corresponding version of azure-storage in azure parent pom. The two dependencies need to be upgraded together. In the past, we had an issue where only one azure-identity was updated, which caused issue in storage module, which uses azure-storage of incompatible version.

@janjwerner-confluent janjwerner-confluent changed the title APPSEC-xyz: update azure-identity to 1.12.2 APPSEC-4267: update azure-identity to 1.12.2 Jun 19, 2024
@janjwerner-confluent
Copy link
Member Author

janjwerner-confluent commented Jun 19, 2024

Hey Truc,
Thanks for checking, we can wait with this update until the end of the month (we have code freeze anyways) and update all the azure dependencies in unison. There is KSECURITY-4212 that handles this issue for ce-kafka.
The matching version is still in beta (https://mvnrepository.com/artifact/com.azure/azure-storage-blob/12.27.0-beta.1)

@trnguyencflt
Copy link
Member

Thanks for checking, we can wait with this update until the end of the month (we have code freeze anyways) and update all the azure dependencies in unison

make sense, thanks 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants