fix CVE-2023-5363 and CVE-2023-5678

bunkerity · Jan 12, 2024 · 426e2aa · 426e2aa
1 parent 37987fc
commit 426e2aa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/bw/Dockerfile b/src/bw/Dockerfile
@@ -78,7 +78,7 @@ RUN apk add --no-cache pcre bash python3 yajl && \
 	ln -s /proc/1/fd/1 /var/log/bunkerweb/access.log
 
 # Fix CVEs
-RUN apk add --no-cache "libwebp>=1.2.4-r3" "curl>=8.3.0-r0" "libcurl>=8.3.0-r0" "nghttp2-libs>=1.51.0-r2" "libx11>=1.8.7-r0"
+RUN apk add --no-cache "libwebp>=1.2.4-r3" "curl>=8.3.0-r0" "libcurl>=8.3.0-r0" "nghttp2-libs>=1.51.0-r2" "libx11>=1.8.7-r0" "libssl3>=3.0.12-r1" "libcrypto3>=3.0.12-r1"
 
 EXPOSE 8080/tcp 8443/tcp