Fix CVE-2024-7264 and CVE-2024-8088

bunkerity · Aug 30, 2024 · 47e76fe · 47e76fe
1 parent 8f0880f
commit 47e76fe
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/bw/Dockerfile b/src/bw/Dockerfile
@@ -52,6 +52,7 @@ RUN apk add --no-cache openssl pcre bash python3 yajl geoip libxml2 libgd curl t
 
 # Fix CVEs
 RUN apk add --no-cache "busybox>=1.36.1-r17" "busybox-binsh>=1.36.1-r17" "ssl_client>=1.36.1-r17" # CVE-2023-42363 CVE-2023-42366
+RUN apk add --no-cache "curl>=8.9.1-r0" "libcurl>=8.9.1-r0" "pyc>=3.12.3-r2" "python3>=3.12.3-r2" "python3-pyc>=3.12.3-r2" "python3-pycache-pyc0>=3.12.3-r2" # CVE-2024-7264 CVE-2024-8088
 
 # Copy dependencies
 COPY --from=builder --chown=0:101 /usr/share/bunkerweb /usr/share/bunkerweb