Status of IoT hub service SDK

[sokolowski-daniel]

Dear azure-iot-sdk-java developers,

It's been a while since the IoT hub service SDK was moved to a new repository (#1668).
Since then, no new version of the SDK has been released, even though the package depends on a vulnerable library (CVE-2023-2976 in guava).
I'm wondering what the current status of this project is and whether an update can be expected in the near future.

Thank you in advance!

[ethanann-ms]

We will update the vulnerable library dependency (CVE-2023-2976) and release the new version of SDK.

Thank you

[sokolowski-daniel]

Glad to hear that, thank you