Skip to content

Commit

Permalink
Update OpenSSL version to include fix for CVE-2023-4807
Browse files Browse the repository at this point in the history
This only updates 3.0.10 since this is the only version which is
bundled. 1.1.1v is sufficient to build against for other platforms, it's
not used at runtime.

See also eclipse-openj9/openj9#18108

Signed-off-by: Peter Shipton <Peter_Shipton@ca.ibm.com>
  • Loading branch information
pshipton committed Sep 11, 2023
1 parent fc4cc2d commit e1ab780
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion sbin/prepareWorkspace.sh
Original file line number Diff line number Diff line change
Expand Up @@ -280,7 +280,7 @@ updateOpenj9Sources() {
cd "${BUILD_CONFIG[WORKSPACE_DIR]}/${BUILD_CONFIG[WORKING_DIR]}/${BUILD_CONFIG[OPENJDK_SOURCE_DIR]}" || return
# NOTE: fetched openssl will NOT be used in the RISC-V cross-compile situation
if [[ "${BUILD_CONFIG[OS_KERNEL_NAME]}" = *"cygwin"* ]] || [[ "${BUILD_CONFIG[OS_KERNEL_NAME]}" == "darwin" ]]; then
bash get_source.sh --openssl-version=3.0.10
bash get_source.sh --openssl-version=openssl-3.0.10+CVEs1 --openssl-repo=https://github.com/ibmruntimes/openssl.git
else
# Continue using 1.1.1 until all platforms can build 3.0.10
bash get_source.sh --openssl-version=1.1.1v
Expand Down

0 comments on commit e1ab780

Please sign in to comment.