{"id":2278,"date":"2022-11-10T09:20:50","date_gmt":"2022-11-10T17:20:50","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/azure-sdk\/?p=2278"},"modified":"2022-11-10T09:20:50","modified_gmt":"2022-11-10T17:20:50","slug":"updating-dependencies-for-azure-sdk-for-c","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/azure-sdk\/updating-dependencies-for-azure-sdk-for-c\/","title":{"rendered":"Updating dependencies for Azure SDK for C++"},"content":{"rendered":"<p><a href=\"https:\/\/www.openssl.org\/blog\/blog\/2022\/11\/01\/email-address-overflows\/\">OpenSSL.org has announced the release of OpenSSL 3.0.7<\/a>, which addresses two HIGH risk security vulnerabilities. These vulnerabilities impact users of OpenSSL 3.0.0 &#8211; 3.0.6, and is further detailed on the <a href=\"https:\/\/msrc-blog.microsoft.com\/2022\/11\/02\/microsoft-guidance-related-to-openssl-risk-cve-2022-3786-and-cve-2202-3602\/\">Microsoft Security Response Center blog<\/a>. Users of the Azure SDK for C++ who have compiled prior to the release of OpenSSL 3.0.7 may be impacted by these vulnerabilities, as libraries within the Azure SDK for C++ link to OpenSSL. It&#8217;s <strong>strongly recommended<\/strong> to upgrade to OpenSSL 3.0.7 as soon as possible.<\/p>\n<h2>Updating via vcpkg<\/h2>\n<p>For developers who have installed the Azure SDK for C++ via vcpkg command line, you may quickly upgrade all packages by updating your local vcpkg copy (such as via <code>git pull<\/code>) and running the following commands:<\/p>\n<pre><code class=\"language-bash\">vcpkg upgrade\r\nvcpkg upgrade --no-dry-run<\/code><\/pre>\n<p>For detailed guidance on upgrading the Azure SDK for C++ or other dependencies via vcpkg, see the C++ team&#8217;s blog post <a href=\"https:\/\/devblogs.microsoft.com\/cppblog\/fix-for-high-risk-openssl-security-vulnerabilities-announced-guidance-for-vcpkg-users\/\">Fix for High Risk OpenSSL Security Vulnerabilities Announced &#8211; Guidance for vcpkg Users<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Using the latest Azure SDK libraries can help keep your codebase and customers secure. This blog post covers common update steps for the Azure SDK for C++ via the vcpkg package manager.<\/p>\n","protected":false},"author":42386,"featured_media":2282,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[815,874],"class_list":["post-2278","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure-sdk","tag-c","tag-openssl"],"acf":[],"blog_post_summary":"<p>Using the latest Azure SDK libraries can help keep your codebase and customers secure. This blog post covers common update steps for the Azure SDK for C++ via the vcpkg package manager.<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/azure-sdk\/wp-json\/wp\/v2\/posts\/2278","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/azure-sdk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/azure-sdk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azure-sdk\/wp-json\/wp\/v2\/users\/42386"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azure-sdk\/wp-json\/wp\/v2\/comments?post=2278"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/azure-sdk\/wp-json\/wp\/v2\/posts\/2278\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azure-sdk\/wp-json\/wp\/v2\/media\/2282"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/azure-sdk\/wp-json\/wp\/v2\/media?parent=2278"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azure-sdk\/wp-json\/wp\/v2\/categories?post=2278"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azure-sdk\/wp-json\/wp\/v2\/tags?post=2278"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}