From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=134.134.136.31; helo=mga06.intel.com; envelope-from=qin.long@intel.com; receiver=edk2-devel@lists.01.org Received: from mga06.intel.com (mga06.intel.com [134.134.136.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id 9F8BC2265A32D for ; Wed, 11 Apr 2018 01:11:35 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga005.fm.intel.com ([10.253.24.32]) by orsmga104.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 11 Apr 2018 01:11:35 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.48,435,1517904000"; d="scan'208";a="219510556" Received: from shwdepsi940.ccr.corp.intel.com ([10.239.9.147]) by fmsmga005.fm.intel.com with ESMTP; 11 Apr 2018 01:11:34 -0700 From: Long Qin To: ting.ye@intel.com Cc: edk2-devel@lists.01.org Date: Wed, 11 Apr 2018 16:11:17 +0800 Message-Id: <20180411081117.232-1-qin.long@intel.com> X-Mailer: git-send-email 2.16.1.windows.1 MIME-Version: 1.0 Subject: [PATCH] CryptoPkg/OpensslLib: Update OpenSSL version to 1.1.0h X-BeenThere: edk2-devel@lists.01.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: EDK II Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Apr 2018 08:11:35 -0000 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit (https://bugzilla.tianocore.org/show_bug.cgi?id=927) Update OpenSSL version to 1.1.0h release (27-Mar-2018) to include the fix for CVE-2018-0739 issue (Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service, Refer to https://www.openssl.org/news/secadv/20180327.txt for more information). Please note "git pull" will not update the submodule repository. use the following commend to make your existing submodule track this update: $ git submodule update -–recursive --remote Cc: Ye Ting Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Long Qin --- CryptoPkg/Library/OpensslLib/openssl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CryptoPkg/Library/OpensslLib/openssl b/CryptoPkg/Library/OpensslLib/openssl index b2758a2292..d4e4bd2a81 160000 --- a/CryptoPkg/Library/OpensslLib/openssl +++ b/CryptoPkg/Library/OpensslLib/openssl @@ -1 +1 @@ -Subproject commit b2758a2292aceda93e9f44c219b94fe21bb9a650 +Subproject commit d4e4bd2a8163f355fa8a3884077eaec7adc75ff7 -- 2.16.1.windows.1