Skip to content

Loki 3.4.2 is using Microsoft Azure Active Directory Authentication Library (ADAL) - End of Life (EOL) Component #16914

Open
@anjaniprayaga

Description

@anjaniprayaga

Describe the bug
We see that the latest Loki 3.4.2 is using ADAL package (github.com/azure/go-autorest/autorest/adal) which has reached its end of life.

To Reproduce
Steps to reproduce the behavior:

  1. Please pull the image and check the package version of the reported ADAL package version in Docker Desktop. PFA the Sbom generated of the image.

Expected behavior
Fix from the upstream: use github.com/Azure/azure-sdk-for-go/sdk/azidentity instead. PFA

Technical Impact: https://learn.microsoft.com/en-us/entra/msal/dotnet/#migration-from-azure-active-directory-authentication-library-adal

Environment:
NA

Screenshots, Promtail config, or terminal output
Image
loki-3-4-2.json

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions