From 05b14bf96db6338302d75a5307bc2e47ee83112b Mon Sep 17 00:00:00 2001 From: Peter Shipton Date: Mon, 20 Jan 2025 13:35:31 -0500 Subject: [PATCH] Update OpenSSL 3.0.15 to include the fix for CVE-2024-13176 See also https://github.ibm.com/runtimes/tooling/pull/1192 Signed-off-by: Peter Shipton --- sbin/prepareWorkspace.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sbin/prepareWorkspace.sh b/sbin/prepareWorkspace.sh index 555d5fe8b..4815199d7 100644 --- a/sbin/prepareWorkspace.sh +++ b/sbin/prepareWorkspace.sh @@ -420,7 +420,7 @@ updateOpenj9Sources() { fi # NOTE: fetched openssl will NOT be used in the RISC-V cross-compile situation - bash get_source.sh -openssl-repo=https://github.com/ibmruntimes/openssl.git -openssl-branch=openssl-3.0.15+CVEs1 ${OPENJCEPLUS_FLAGS} ${GSKIT_FLAGS} ${GSKIT_CREDENTIALS} + bash get_source.sh -openssl-repo=https://github.com/ibmruntimes/openssl.git -openssl-branch=openssl-3.0.15+CVEs2 ${OPENJCEPLUS_FLAGS} ${GSKIT_FLAGS} ${GSKIT_CREDENTIALS} cd "${BUILD_CONFIG[WORKSPACE_DIR]}" fi }