diff --git a/images/base/Earthfile b/images/base/Earthfile
index 0c9f856..8b7b2df 100644
--- a/images/base/Earthfile
+++ b/images/base/Earthfile
@@ -1,7 +1,7 @@
 VERSION 0.7
 
 image:
-  FROM ubuntu:jammy-20240125
+  FROM ubuntu:jammy-20240212
   LABEL org.opencontainers.image.source=https://github.com/vexxhost/atmosphere
-  # CVE-2023-5678, CVE-2023-6129, CVE-2023-6237, CVE-2024-0727
-  DO ../+APT_INSTALL --PACKAGES "libssl3=3.0.2-0ubuntu1.14"
+  # CVE-2023-4641
+  DO ../+APT_INSTALL --PACKAGES "login=1:4.8.1-2ubuntu2.2 passwd=1:4.8.1-2ubuntu2.2"
diff --git a/images/openstack-service/Earthfile b/images/openstack-service/Earthfile
index 5c0552c..ae4ab49 100644
--- a/images/openstack-service/Earthfile
+++ b/images/openstack-service/Earthfile
@@ -47,9 +47,9 @@
   END
   GIT CLONE --branch ${BRANCH} https://github.com/openstack/requirements /src
   RUN \
-    sed -i 's/cryptography===36.0.2/cryptography===42.0.0/' /src/upper-constraints.txt && \
-    sed -i 's/cryptography===40.0.2/cryptography===42.0.0/' /src/upper-constraints.txt && \
-    sed -i 's/cryptography===41.0.7/cryptography===42.0.0/' /src/upper-constraints.txt && \
+    sed -i 's/cryptography===36.0.2/cryptography===42.0.4/' /src/upper-constraints.txt && \
+    sed -i 's/cryptography===40.0.2/cryptography===42.0.4/' /src/upper-constraints.txt && \
+    sed -i 's/cryptography===41.0.7/cryptography===42.0.4/' /src/upper-constraints.txt && \
     sed -i 's/Django===3.2.18/Django===3.2.24/' /src/upper-constraints.txt && \
     sed -i 's/Flask===2.2.3/Flask===2.2.5/' /src/upper-constraints.txt && \
     sed -i 's/Jinja2===3.1.2/Jinja2===3.1.3/' /src/upper-constraints.txt && \