Fix CVE CVE-2024-4603

bunkerity · May 21, 2024 · a916bfe · a916bfe
1 parent df1dd80
commit a916bfe
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/src/autoconf/Dockerfile b/src/autoconf/Dockerfile
@@ -62,6 +62,7 @@ RUN apk add --no-cache bash && \
 
 # Fix CVEs
 RUN apk add --no-cache "busybox>=1.36.1-r17" "busybox-binsh>=1.36.1-r17" "ssl_client>=1.36.1-r17" # CVE-2023-42363 CVE-2023-42364 CVE-2023-42365 CVE-2023-42366
+RUN apk add --no-cache "libcrypto3>=3.1.5-r0" "libssl3>=3.1.5-r0" # CVE-2024-4603
 
 LABEL maintainer "Bunkerity <[email protected]>"
 LABEL version "1.5.7"

diff --git a/src/ui/Dockerfile b/src/ui/Dockerfile
@@ -63,6 +63,7 @@ RUN apk add --no-cache bash unzip libmagic mariadb-client postgresql-client sqli
 
 # Fix CVEs
 RUN apk add --no-cache "busybox>=1.36.1-r17" "busybox-binsh>=1.36.1-r17" "ssl_client>=1.36.1-r17" # CVE-2023-42363 CVE-2023-42364 CVE-2023-42365 CVE-2023-42366
+RUN apk add --no-cache "libcrypto3>=3.1.5-r0" "libssl3>=3.1.5-r0" # CVE-2024-4603
 
 LABEL maintainer "Bunkerity <[email protected]>"
 LABEL version "1.5.7"