Please update dependencies/system Packages

[svbroeker]

Hi,

there are some packages that have open CVE's, like:

curl CVE-2025-10148 Medium
curl CVE-2025-9086 Medium
libcurl CVE-2025-10148 Medium
libcurl CVE-2025-9086 Medium
rack CVE-2025-61770 High
rack CVE-2025-61771 High
rack CVE-2025-61772 High

Could you update those please?
We're currently on 1.62.0

[pglombardo]

Hi @svbroeker! I'll do this today and post back soon.

[pglombardo]

v1.62.1 is building now. I'll recheck the security scanners after the image posts. It should knock of most of the above. Need to evaluate that the curl related issues have been resolved.

[pglombardo]

Some issues still remain. Waiting on upstream fixes.

[svbroeker]

Hey the issues i've listed are fixed now we have these ones:

busybox CVE-2024-58251 Medium
busybox-binsh CVE-2024-58251 Medium
libpq CVE-2025-12817 Medium
libpq CVE-2025-12818 High
ssl_client CVE-2024-58251 Medium

image_tag: docker.io/pglombardo/pwpush:1.63.4

[pglombardo]

Hi @svbroeker - since a couple months has passed, I'll close this out. Dependencies are automatically updated with dependabot and we release weekly so many of these warnings are transient until the next release. If you see anything critical, issues are always appreciated!