[jira] [Commented] (NIFI-13627) Bump azure-sdk-bom to 1.2.25, and msal4j to 1.16.1 for nifi-property-protection-azure

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/NIFI-13627?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17870711#comment-17870711 ] 

ASF subversion and git services commented on NIFI-13627:
--------------------------------------------------------

Commit 440d5e52536664f9af35ec9512aef1280fee9475 in nifi's branch refs/heads/support/nifi-1.x from Rajmund Takacs
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=440d5e5253 ]

NIFI-13627: Bump azure-sdk-bom to 1.2.25 and msal4j to 1.16.1 for nifi-property-protection-azure

This closes #9144.

Signed-off-by: Peter Turcsanyi <tu...@apache.org>


> Bump azure-sdk-bom to 1.2.25, and msal4j to 1.16.1 for nifi-property-protection-azure
> -------------------------------------------------------------------------------------
>
>                 Key: NIFI-13627
>                 URL: https://issues.apache.org/jira/browse/NIFI-13627
>             Project: Apache NiFi
>          Issue Type: Task
>    Affects Versions: 1.28.0
>            Reporter: Rajmund Takacs
>            Assignee: Rajmund Takacs
>            Priority: Major
>             Fix For: 1.28.0
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Applies to 1.x support branch.
> {{azure.sdk.bom.version}} should be {{1.2.25+}}
> {{msal4j.version}} should be {{1.16.1+}}
> CVEs fixed in these versions:
> * CVE-2023-36415
> * CVE-2024-35255
>  
> NIFI-13574 fixed the same CVEs in {{nifi-azure-bundle,}} the CVEs have to be fixed for {{nifi-property-protection-azure}} as well.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)