[NIFI-13627] Bump azure-sdk-bom to 1.2.25, and msal4j to 1.16.1 for nifi-property-protection-azure

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.28.0
• Fix Version/s: 1.28.0
• Assignee: Rajmund Takacs
• Reporter: Rajmund Takacs
• Created: 03/Aug/24 09:15
• Updated: 03/Aug/24 12:46
• Resolved: 03/Aug/24 12:46

Description

Applies to 1.x support branch.

azure.sdk.bom.version should be 1.2.25+
msal4j.version should be 1.16.1+

CVEs fixed in these versions:

• CVE-2023-36415
• CVE-2024-35255
   

NIFI-13574 fixed the same CVEs in nifi-azure-bundle, the CVEs have to be fixed for nifi-property-protection-azure as well.

Issue Links

• relates to: NIFI-13574 Upgrade Azure SDK BOM to 1.2.25 and msal4j to 1.16.1
• links to: GitHub Pull Request #9144