diff --git a/src/libstd/build.rs b/src/libstd/build.rs
index 726c27321538d..9d72ea02176df 100644
--- a/src/libstd/build.rs
+++ b/src/libstd/build.rs
@@ -30,6 +30,10 @@ fn main() {
         println!("cargo:rustc-link-lib=resolv");
     } else if target.contains("apple-darwin") {
         println!("cargo:rustc-link-lib=System");
+        #[cfg(miri)]
+        // With Miri, we use SecRandomCopyBytes got randomness, so we need to link
+        // with `framework=Security`.
+        println!("cargo:rustc-link-lib=framework=Security");
 
         // res_init and friends require -lresolv on macOS/iOS.
         // See #41582 and http://blog.achernya.com/2013/03/os-x-has-silly-libsystem.html
diff --git a/src/tools/miri b/src/tools/miri
index 053aa694990a2..25862b5513246 160000
--- a/src/tools/miri
+++ b/src/tools/miri
@@ -1 +1 @@
-Subproject commit 053aa694990a212ad8942dd72101ede23597c0e9
+Subproject commit 25862b5513246d1d6a2dbf48e022686654a51784