[Question] Multiple EOL libraries used in AKS 1.28.10 system containers

[Dominik-esb]

Describe scenario I have noticed that several components running in AKS 1.28.10 are utilizing libraries that have reached their end of life. Below are the details of the EOL libraries identified:

1. Azure CNS Container:

• Library: OpenSSL 1.1.1k
• EOL Date: September 10, 2019
• Details: OpenSSL 1.1.1k has been EOL for several years. The latest versions of OpenSSL 1.1.1 have also been deprecated.
• Reference: OpenSSL 1.1.1 EOL Announcement

2. Container Insights (cipro) Container:

• Library: Active Directory Authentication Library (ADAL) 0.9.23
• EOL Date: March 31, 2023
• Details: ADAL 0.9.23 has been deprecated, and it is recommended to move to the Microsoft Authentication Library (MSAL).
• Reference: ADAL Deprecation Announcement

2. Container Insights (cipro) Container:

• Library: Fluent Bit 2.2.3
• EOL Date: June 21, 2024
• Details: Fluent Bit 2.2.3 will reach its EOL soon. It is important to upgrade to a supported version to ensure continued security and functionality.
• Reference: Fluent Bit EOL Information

Question Is this intended, or might this be an issue with my cluster’s configuration? Additionally, are there plans to update these libraries to supported versions soon?

[microsoft-github-policy-service[bot]]

This issue has been automatically marked as stale because it has not had any activity for 21 days. It will be closed if no further activity occurs within 7 days of this comment.

[microsoft-github-policy-service[bot]]

@ganga1980, @saaror would you be able to assist?

[ganga1980]

2 has been already rolled out and we dont use the ADAL lib any more.

3 we are picking security patches and pushing the security patches periodically. will post an update on migrating to 3.x.x as we have dependency this on azure linux.

[microsoft-github-policy-service[bot]]

This issue has been automatically marked as stale because it has not had any activity for 21 days. It will be closed if no further activity occurs within 7 days of this comment.

[microsoft-github-policy-service[bot]]

This issue will now be closed because it hasn't had any activity for 7 days after stale. Dominik-esb feel free to comment again on the next 7 days to reopen or open a new issue after that time if you still have a question/issue or suggestion.