diff --git a/composer.json b/composer.json
index 8e07b884..38e8459c 100644
--- a/composer.json
+++ b/composer.json
@@ -13,7 +13,7 @@
     "require": {
         "ezsystems/ezpublish-legacy": ">=2014.11",
         "ezsystems/ezpublish-kernel": "~6.0@dev",
-        "sensio/distribution-bundle": "^3.0|^4.0|^5.0",
+        "sensio/distribution-bundle": "^3.0.36|^4.0.6|^5.0.6",
         "twig/twig": "^1.27 | ^2.0"
     },
     "require-dev": {