diff --git a/CHANGELOG.md b/CHANGELOG.md
index d8737c1..d41a3d0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 This project tries to follow [Semantic Versioning](http://semver.org/).
 
+## [0.9.14] - Unreleased
+
+- Docker: upgrade nginx (1.25.3 -> 1.25.4)
+
 ## [0.9.13] - 2023-10-31
 
 - Docker: upgrade nginx (1.23.2 -> 1.25.3)
diff --git a/Dockerfile b/Dockerfile
index 048ca47..9c55ae5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM nginx:1.25.3-alpine
+FROM nginx:1.25.4-alpine
 
 # certbot from letsencrypt
 # gettext for envsubst