Skip to content

Poison leak of IdentityModel assemblies from dotnet-user-jwts #3601

@mthalman

Description

@mthalman

The following showed up in the poison leak report from commit dotnet/dotnet@f9a1c48 in the release/8.0.1xx branch of the VMR.

<PrebuiltLeakReport>
  <File Path="dotnet-sdk-x.y.z-banana-rid.tar/sdk/x.y.z/DotnetTools/dotnet-user-jwts/x.y.z/tools/netx.y/any/Microsoft.IdentityModel.Abstractions.dll">
    <Type>AssemblyAttribute</Type>
  </File>
  <File Path="dotnet-sdk-x.y.z-banana-rid.tar/sdk/x.y.z/DotnetTools/dotnet-user-jwts/x.y.z/tools/netx.y/any/Microsoft.IdentityModel.JsonWebTokens.dll">
    <Type>AssemblyAttribute</Type>
  </File>
  <File Path="dotnet-sdk-x.y.z-banana-rid.tar/sdk/x.y.z/DotnetTools/dotnet-user-jwts/x.y.z/tools/netx.y/any/Microsoft.IdentityModel.Logging.dll">
    <Type>AssemblyAttribute</Type>
  </File>
  <File Path="dotnet-sdk-x.y.z-banana-rid.tar/sdk/x.y.z/DotnetTools/dotnet-user-jwts/x.y.z/tools/netx.y/any/Microsoft.IdentityModel.Tokens.dll">
    <Type>AssemblyAttribute</Type>
  </File>
  <File Path="dotnet-sdk-x.y.z-banana-rid.tar/sdk/x.y.z/DotnetTools/dotnet-user-jwts/x.y.z/tools/netx.y/any/System.IdentityModel.Tokens.Jwt.dll">
    <Type>AssemblyAttribute</Type>
  </File>
</PrebuiltLeakReport>

This is most likely because of dotnet/source-build-externals#194 but aspnetcore hasn't been updated to reference the new version yet: dotnet/aspnetcore#50218.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    Status

    Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions