Unable to update libssl-3.dll from 3.0.19 to 3.0.20

[DiwakarKShell]

Describe the bug

Unable to update the file C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\libssl-3.dll version 3.0.19.0 is vulnerable to CVE-2026-31790, which exists in versions `>= 3.0.0, < 3.0.20

Related command

az version

Errors

.

Issue script & Debug output

file C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\libssl-3.dll version 3.0.19.0 is vulnerable to CVE-2026-31790, which exists in versions `>= 3.0.0, < 3.0.20

Expected behavior

libssl-3.dll 3.0.20

Environment Summary

PS C:\Windows\system32> az version
{
"azure-cli": "2.87.0",
"azure-cli-core": "2.87.0",
"azure-cli-telemetry": "1.1.0",
"extensions": {}
}
PS C:\Windows\system32> az --version
azure-cli 2.87.0

core 2.87.0
telemetry 1.1.0

Dependencies:
msal 1.36.0
azure-mgmt-resource 24.0.0

Python location 'C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\python.exe'
Config directory 'C:\Users\DiwakarK.azure'
Extensions directory 'C:\Users\DiwakarK.azure\cliextensions'

Python (Windows) 3.13.13 (tags/v3.13.13:01104ce, Apr 7 2026, 19:11:29) [MSC v.1944 32 bit (Intel)]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.
PS C:\Windows\system32> (Get-Item "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\libssl-3.dll").VersionInfo

ProductVersion FileVersion FileName

---

3.0.19 3.0.19 C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\libssl-3.dll

Additional context

No response

[yonzhan]

Thank you for opening this issue, we will look into it.

[github-actions]

This issue is related to security. Please pay attention.

Powered by issue-sentinel

[DiwakarKShell]

Is there an update on this?

[DiwakarKShell]

Hi, the Vulnerability is approaching the target Remediation Data. Could you please expedite this?

[yonzhan]

@msarfraz is working on this