Share via

How to update openssl?

Anonymous
2023-11-30T05:09:16+00:00

Our system indicates the necessity to patch OpenSSL to address vulnerabilities. However, there is no standalone installation of OpenSSL; it is integrated within the applications we utilize. Is there a solution to patch OpenSSL in this scenario? Kindly advise on the recommended approach to address this issue.

Microsoft 365 and Office | Microsoft 365 Defender | Other | Windows

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-11-30T08:28:05+00:00

    Hello

    I’m Adeyemi and I’d be happy to help you with your question.

    Updating OpenSSL when it's integrated within applications can be a bit tricky, but it's not impossible. Here are some general steps you can follow:

    1. Identify the Applications: Determine which applications on your system are using OpenSSL. This might require checking the documentation or contacting the software vendor.
    2. Check for Updates: Many applications bundle OpenSSL and will provide updates that include updated versions of OpenSSL when they become available. Check the software vendor's website or contact them directly to see if they have released an update.
    3. Recompile the Application: If the application's source code is available, and it's feasible, you could recompile the application with the updated OpenSSL library. This is a more technical approach and requires some knowledge of programming and compilation.
    4. Use a Package Manager: If you're using a package manager like vcpkg, you can update just OpenSSL and nothing else. This might not be applicable in all scenarios, especially if the application statically links OpenSSL.

    If none of the above options are viable, your best bet would be to contact the vendor of the software and inquire about their plans for addressing the OpenSSL vulnerability.

    Remember, it's crucial to test all changes in a safe and reversible manner, ideally in a non-production environment first. Always backup your data before making such updates.

    I hope this helps.

    Give back to the community. Help the next person who has this issue by indicating if this reply solved your problem. Click Yes or No below.

    Kind regards, Adeyemi

    4 people found this answer helpful.
    0 comments