diff --git a/devicemodel/bios/MD5SUM_ovmf b/devicemodel/bios/MD5SUM_ovmf
index aeac6bccf..cccbfe847 100644
--- a/devicemodel/bios/MD5SUM_ovmf
+++ b/devicemodel/bios/MD5SUM_ovmf
@@ -1,2 +1,2 @@
-5be0a61e588506bd40e98f9d5ae5c6f1  OVMF.fd
-7820bf17fd75c5202e19e7aa36169f7b  OVMF_debug.fd
+9d2ee27e00afc6c54f6106eb40aa99f0  OVMF.fd
+99c9357921ba28b394d8835f75a9001d  OVMF_debug.fd
diff --git a/devicemodel/bios/OVMF.fd b/devicemodel/bios/OVMF.fd
index 7443fb1ac..b444dd030 100644
Binary files a/devicemodel/bios/OVMF.fd and b/devicemodel/bios/OVMF.fd differ
diff --git a/devicemodel/bios/OVMF_debug.fd b/devicemodel/bios/OVMF_debug.fd
index dca1b08f6..9f3c983d4 100644
Binary files a/devicemodel/bios/OVMF_debug.fd and b/devicemodel/bios/OVMF_debug.fd differ
diff --git a/devicemodel/bios/SHA512SUM_ovmf b/devicemodel/bios/SHA512SUM_ovmf
index cb3fddbc6..a25612b22 100644
--- a/devicemodel/bios/SHA512SUM_ovmf
+++ b/devicemodel/bios/SHA512SUM_ovmf
@@ -1,2 +1,2 @@
-a91681f6dcce8bb4ce00d15eb1e0a4ee1211b8d6701e8e08dcc21cc4426c03c00b30c146884f5c891c67677df19234bae784e39d094c0b5f06ee9d507284541f  OVMF.fd
-59b8d9396e2b7eac690a1d2c367b9314a361b99d78f1068d3cef3d67ae26accff717c63968c0d243a1faf7be18ab68a3607c8b5583ac6ac7966955dd8aafb871  OVMF_debug.fd
+20e3efc367012a737a953a68d2a5fbeaf707ea71f62138387e1813c0a2d07123e79f980fde1ee3cd43ebcd03851fc55af6ec2858fb4b6234f67af4022acfd9b8  OVMF.fd
+a3baa35f2a1c6d8a2fef6bdcfcb23bc971279f25319f83ac5a989ac6cf1f1da401acf98773725a6144d0e108ef40e7321515f9773308686ab8a7d9e10d0970b6  OVMF_debug.fd
diff --git a/devicemodel/bios/changelog_ovmf.txt b/devicemodel/bios/changelog_ovmf.txt
index 6d7bac2f9..25c5609fe 100644
--- a/devicemodel/bios/changelog_ovmf.txt
+++ b/devicemodel/bios/changelog_ovmf.txt
@@ -1,3 +1,37 @@
+OVMF release v1.5
+
+- Upgrade OpenSSL to 1.1.1d - cherry-picked the following commits from master:
+  - 4d613feee5 - CryptoPkg/OpensslLib.inf: list OpenSSL local header
+    "ms/uplink.h" (2019-12-02) <Laszlo Ersek>
+  - b49a6c8f80 - CryptoPkg/OpensslLib: improve INF file consistency
+    (2019-12-02) <Laszlo Ersek>
+  - 1bcc65b9a1 - CryptoPkg: Upgrade OpenSSL to 1.1.1d (2019-11-05) <Shenglei
+    Zhang>
+  - 9f4fbd56d4 - CryptoPkg/OpensslLib: Update process_files.pl to generate .h
+    files (2019-10-30) <Shenglei Zhang>
+  - 8906f076de - CryptoPkg/OpensslLib: Add missing header files in INF file
+    (2019-08-16) <Shenglei Zhang>
+  - 51f7a3e6c5 - CryptoPkg/OpensslLib: Exclude err_all.c in process_files.pl
+    (2019-06-25) <Xiaoyu Lu>
+  - b86fbe1f98 - CryptoPkg/OpensslLib: disable autoload-config for OpenSSL
+    (2019-06-21) <Xiaoyu Lu>
+  - 20d2e5a125 - CryptoPkg/OpensslLib: fix build break caused by missing
+    library (2019-06-06) <Wang, Jian J>
+  - 0a1b13fd4d - CryptoPkg/OpensslLib: fix VS2017 build failure (2019-06-05)
+    <Wang, Jian J>
+  - 456dd8b99f - CryptoPkg: Upgrade OpenSSL to 1.1.1b (2019-06-03) <XiaoyuX
+    Lu>
+  - b739678918 - CryptoPkg/OpensslLib: Add functions for upgrading
+    OpenSSL1_1_1b (2019-06-03) <XiaoyuX Lu>
+  - 5db2fbff23 - CryptoPkg/OpensslLib: Prepare for upgrading OpenSSL
+    (2019-06-03) <XiaoyuX Lu>
+  - 7eee048894 - CryptoPkg/OpensslLib: Exclude unnecessary files in
+    process_files.pl (2019-06-03) <Xiaoyu Lu>
+  - 6fcc3d68eb - CryptoPkg/OpensslLib: Modify process_files.pl for upgrading
+    OpenSSL (2019-06-03) <Xiaoyu Lu>
+  - a18f784cfd - Upgrade OpenSSL to 1.1.0j (2018-12-21) <Jian J Wang>
+- Security hardening for OVMF build
+
 OVMF release v1.4
 
 - Add back USB keyboard support