This release contains security fixes, stability improvements and new capabilities delivered for the Alfresco Content Services 25.3 family. In addition, this release contains an updated stack of supported databases, operating systems and platforms providing up to date support.
Installation
Alfresco Community Edition 25.3 is available as a distribution zip file for manual installation, or it can be installed using an Ansible playbook (Linux only) for non-containerized environments. It is also available as a set of Docker images that can be deployed in containerized environments using docker-compose or Helm charts (for Kubernetes).
You can find a summary of these options here:
https://support.hyland.com/r/Alfresco/Alfresco-Content-Services-Community-Edition/25.3/Alfresco-Content-Services-Community-Edition/Install/Overview
ZIP Distribution files
Ansible
Deployment resources available in Alfresco/alfresco-ansible-deployment (https://github.com/Alfresco/alfresco-ansible-deployment)
Docker Compose
Reference Docker Compose template is available in community-docker-compose.yml
Additional Docker Compose deployment methods:
Kubernetes
Helm charts are available in https://github.com/Alfresco/alfresco-helm-charts
Upgrading from previous releases
Care should be taken when upgrading from any previous releases of Alfresco Community Edition. There are some steps that should be reviewed and planned before you upgrade. Please take the time to familiarize yourself with the guidance below and plan your upgrade.
Please refer to the detailed Upgrading documentation, including Alfresco Content Services upgrade paths.
In particular, please ensure that the following steps are completed before you start your upgrade process:
- Ensure that you have a functional backup of your Alfresco Repository and your Alfresco Database, before starting the upgrade process
- Download and run the Alfresco Extension Inspector to understand, which customization or library items need to be reviewed or updated prior to starting
- Review all new and deprecated features included in this release note
- Review and implement the new supported stack options and the minimum versions of modules/extensions required, and update as necessary for the new deployment
- Apply the recommended database optimization patch for larger implementations (see upgrade documentation for details)
Specific Release Components
Alfresco Mobile
The latest release of Alfresco Mobile Workspace is 1.12.0 and is compatible with Alfresco Content Services 25.3
SDK
The latest release of the Alfresco in-process SDK is SDK 4.12.0, which is compatible with Alfresco Content Services 25.3.
The latest release of the Alfresco out-of-process Event SDK is SDK 7.1.0, which is compatible with Alfresco Content Services 25.3.
Documentation
The documentation has been refreshed for this release: https://support.hyland.com/p/alfresco
Localization
The Content Repository supports the following languages: French, German, Italian, Spanish, Japanese, Dutch, Norwegian (Bokmål), Russian, Brazilian Portuguese, Polish, Czech, Danish, Swedish, Finnish and Simplified Chinese.
Share supports the following languages: French, German, Italian, Spanish, Japanese, Dutch, Norwegian (Bokmål), Russian, Brazilian Portuguese and Simplified Chinese.
Alfresco Content Application supports the following languages: French, German, Italian, Spanish, Japanese, Dutch, Norwegian (Bokmål), Russian, Brazilian Portuguese, Polish, Czech, Danish, Swedish, Finnish and Simplified Chinese.
Contents
Images are available on Docker Hub
Following Docker Images are available in both AMD64 and ARCH64 architectures:
The source code for the packaging project that is used to create and run Docker images and build the distribution zip can be found here (https://github.com/Alfresco/acs-community-packaging/releases/tag/25.3.0).
REPOSITORY: alfresco-content-repository-community
Provenance: https://github.com/Alfresco/alfresco-docker-base-tomcat
Size: 921 MB (+3 MB)
Packages: 385 (+0)
## Environment Variables
APR_LIBDIR=/usr/local/tomcat/apr
CATALINA_HOME=/usr/local/tomcat
JAVA_HOME=/etc/alternatives/jre
LANG=C.UTF-8
LC_ALL=C.UTF-8
LD_LIBRARY_PATH=/usr/local/tomcat/native-jni-lib:/usr/local/tomcat/apr
PATH=/usr/local/tomcat/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
TOMCAT_NATIVE_LIBDIR=/usr/local/tomcat/native-jni-lib
## Labels
org.label-schema.build-date=2025-07-14T10:18:17Z
org.label-schema.description=Apache Tomcat Image tailored for Alfresco products
org.label-schema.name=Alfresco Base Tomcat Image
org.label-schema.schema-version=1.0
org.label-schema.url=https://github.com/Alfresco/alfresco-docker-base-tomcat
org.label-schema.vcs-ref=https://github.com/Alfresco/alfresco-docker-base-tomcat
org.label-schema.vcs-url=https://github.com/Alfresco/alfresco-docker-base-tomcat
org.label-schema.vendor=Hyland
org.opencontainers.image.authors=Alfresco OPS-Readiness
org.opencontainers.image.created=2025-07-14T10:18:17Z
org.opencontainers.image.description=Apache Tomcat Image tailored for Alfresco products
org.opencontainers.image.revision=584
org.opencontainers.image.source=https://github.com/Alfresco/alfresco-docker-base-tomcat
org.opencontainers.image.title=Alfresco Base Tomcat Image
org.opencontainers.image.url=https://github.com/Alfresco/alfresco-docker-base-tomcat
org.opencontainers.image.vendor=Hyland
## Packages and Vulnerabilities
+ 3 packages added
- 3 packages removed
⎌ 165 packages changed (↑ 165 upgraded, ↓ 0 downgraded)
217 packages unchanged
Package Version Previous
↑ com.fasterxml.woodstox/woodstox-core 7.1.1 7.0.0
↑ com.github.albfernandez/juniversalchardet 2.5.0 2.4.0
↑ com.google.code.gson/gson 2.13.1 2.12.1
↑ com.google.errorprone/error_prone_annotations 2.38.0 2.36.0
↑ com.healthmarketscience.jackcess/jackcess 4.0.8 4.0.5
↑ com.healthmarketscience.jackcess/jackcess-encrypt 4.0.3 4.0.2
↑ com.nimbusds/nimbus-jose-jwt 9.37.4 9.37.3
↑ com.sun.mail/jakarta.mail 2.0.2 2.0.1
↑ commons-io/commons-io 2.20.0 2.18.0
↑ commons-logging/commons-logging 1.3.5 1.3.3
↑ commons-validator/commons-validator 1.10.0 1.9.0
↑ io.micrometer/micrometer-commons 1.14.11 1.14.3
↑ io.micrometer/micrometer-observation 1.14.11 1.14.3
↑ io.netty/netty-buffer 4.1.127.Final 4.1.118.Final
↑ io.netty/netty-codec 4.1.127.Final 4.1.118.Final
↑ io.netty/netty-codec-http 4.1.127.Final 4.1.118.Final
↑ io.netty/netty-codec-socks 4.1.127.Final 4.1.118.Final
↑ io.netty/netty-common 4.1.127.Final 4.1.118.Final
↑ io.netty/netty-handler 4.1.127.Final 4.1.118.Final
↑ io.netty/netty-handler-proxy 4.1.127.Final 4.1.118.Final
↑ io.netty/netty-resolver 4.1.127.Final 4.1.118.Final
↑ io.netty/netty-tcnative-classes 2.0.73.Final 2.0.70.Final
↑ io.netty/netty-transport 4.1.127.Final 4.1.118.Final
↑ io.netty/netty-transport-classes-epoll 4.1.127.Final 4.1.118.Final
↑ io.netty/netty-transport-classes-kqueue 4.1.127.Final 4.1.118.Final
↑ io.netty/netty-transport-native-epoll 4.1.127.Final 4.1.118.Final
↑ io.netty/netty-transport-native-kqueue 4.1.127.Final 4.1.118.Final
↑ io.netty/netty-transport-native-unix-common 4.1.127.Final 4.1.118.Final
↑ joda-time/joda-time 2.14.0 2.13.1
↑ org.alfresco.aos-module/alfresco-aos-module 3.4.0 3.3.0
↑ org.alfresco.aos-module/alfresco-aos-repo-binding 3.4.0 3.3.0
↑ org.alfresco.aos-module/alfresco-vti-bin 3.4.0 3.3.0
↑ org.alfresco.officeservices/aoservices 4.0.11 4.0.11-A1
↑ org.alfresco.officeservices/docproc 4.0.11 4.0.11-A1
↑ org.alfresco/acs-event-model 1.0.11 1.0.2
↑ org.alfresco/alfresco-core 25.3.0.81 25.2.0.64
↑ org.alfresco/alfresco-data-model 25.3.0.81 25.2.0.64
↑ org.alfresco/alfresco-mmt 25.3.0.81 25.2.0.64
↑ org.alfresco/alfresco-remote-api 25.3.0.81 25.2.0.64
↑ org.alfresco/alfresco-share-services 25.3.0.81 25.2.0.64
↑ org.alfresco/alfresco-transform-model 5.2.4 5.2.0
↑ org.apache.camel/camel-activemq 4.15.0 4.11.0
↑ org.apache.camel/camel-amqp 4.15.0 4.11.0
↑ org.apache.camel/camel-api 4.15.0 4.11.0
↑ org.apache.camel/camel-base 4.15.0 4.11.0
↑ org.apache.camel/camel-base-engine 4.15.0 4.11.0
↑ org.apache.camel/camel-bean 4.15.0 4.11.0
↑ org.apache.camel/camel-browse 4.15.0 4.11.0
↑ org.apache.camel/camel-cluster 4.15.0 4.11.0
↑ org.apache.camel/camel-controlbus 4.15.0 4.11.0
↑ org.apache.camel/camel-core 4.15.0 4.11.0
↑ org.apache.camel/camel-core-catalog 4.15.0 4.11.0
↑ org.apache.camel/camel-core-engine 4.15.0 4.11.0
↑ org.apache.camel/camel-core-languages 4.15.0 4.11.0
↑ org.apache.camel/camel-core-model 4.15.0 4.11.0
↑ org.apache.camel/camel-core-processor 4.15.0 4.11.0
↑ org.apache.camel/camel-core-reifier 4.15.0 4.11.0
↑ org.apache.camel/camel-core-xml 4.15.0 4.11.0
↑ org.apache.camel/camel-dataformat 4.15.0 4.11.0
↑ org.apache.camel/camel-dataset 4.15.0 4.11.0
↑ org.apache.camel/camel-direct 4.15.0 4.11.0
↑ org.apache.camel/camel-file 4.15.0 4.11.0
↑ org.apache.camel/camel-health 4.15.0 4.11.0
↑ org.apache.camel/camel-jackson 4.15.0 4.11.0
↑ org.apache.camel/camel-jms 4.15.0 4.11.0
↑ org.apache.camel/camel-language 4.15.0 4.11.0
↑ org.apache.camel/camel-log 4.15.0 4.11.0
↑ org.apache.camel/camel-management 4.15.0 4.11.0
↑ org.apache.camel/camel-management-api 4.15.0 4.11.0
↑ org.apache.camel/camel-mock 4.15.0 4.11.0
↑ org.apache.camel/camel-ref 4.15.0 4.11.0
↑ org.apache.camel/camel-rest 4.15.0 4.11.0
↑ org.apache.camel/camel-saga 4.15.0 4.11.0
↑ org.apache.camel/camel-scheduler 4.15.0 4.11.0
↑ org.apache.camel/camel-seda 4.15.0 4.11.0
↑ org.apache.camel/camel-spring 4.15.0 4.11.0
↑ org.apache.camel/camel-spring-xml 4.15.0 4.11.0
↑ org.apache.camel/camel-stub 4.15.0 4.11.0
↑ org.apache.camel/camel-support 4.15.0 4.11.0
↑ org.apache.camel/camel-timer 4.15.0 4.11.0
↑ org.apache.camel/camel-tooling-model 4.15.0 4.11.0
↑ org.apache.camel/camel-util 4.15.0 4.11.0
↑ org.apache.camel/camel-util-json 4.15.0 4.11.0
↑ org.apache.camel/camel-validator 4.15.0 4.11.0
↑ org.apache.camel/camel-xml-io 4.15.0 4.11.0
↑ org.apache.camel/camel-xml-io-util 4.15.0 4.11.0
↑ org.apache.camel/camel-xml-jaxb 4.15.0 4.11.0
↑ org.apache.camel/camel-xml-jaxp 4.15.0 4.11.0
↑ org.apache.camel/camel-xml-jaxp-util 4.15.0 4.11.0
↑ org.apache.camel/camel-xpath 4.15.0 4.11.0
↑ org.apache.camel/camel-xslt 4.15.0 4.11.0
↑ org.apache.camel/camel-yaml-io 4.15.0 4.11.0
↑ org.apache.commons/commons-exec 1.5.0 1.4.0
↑ org.apache.commons/commons-lang3 3.18.0 3.17.0
↑ org.apache.cxf/cxf-core 4.1.2 4.1.0
↑ org.apache.cxf/cxf-rt-bindings-soap 4.1.2 4.1.0
↑ org.apache.cxf/cxf-rt-bindings-xml 4.1.2 4.1.0
↑ org.apache.cxf/cxf-rt-databinding-jaxb 4.1.2 4.1.0
↑ org.apache.cxf/cxf-rt-frontend-jaxws 4.1.2 4.1.0
↑ org.apache.cxf/cxf-rt-frontend-simple 4.1.2 4.1.0
↑ org.apache.cxf/cxf-rt-transports-http 4.1.2 4.1.0
↑ org.apache.cxf/cxf-rt-ws-addr 4.1.2 4.1.0
↑ org.apache.cxf/cxf-rt-ws-policy 4.1.2 4.1.0
↑ org.apache.cxf/cxf-rt-wsdl 4.1.2 4.1.0
↑ org.apache.james/apache-mime4j-core 0.8.13 0.8.11
↑ org.apache.james/apache-mime4j-dom 0.8.13 0.8.11
↑ org.apache.logging.log4j/log4j-api 2.25.1 2.24.3
↑ org.apache.logging.log4j/log4j-core 2.25.1 2.24.3
↑ org.apache.logging.log4j/log4j-slf4j2-impl 2.25.1 2.24.3
↑ org.apache.pdfbox/fontbox 3.0.5 2.0.31
↑ org.apache.pdfbox/xmpbox 3.0.5 2.0.31
↑ org.apache.qpid/qpid-jms-client 2.9.0 2.7.0
↑ org.apache.santuario/xmlsec 4.0.4 4.0.3
↑ org.apache.tika/tika-core 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-apple-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-audiovideo-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-cad-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-code-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-crypto-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-digest-commons 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-font-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-html-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-image-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-mail-commons 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-mail-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-microsoft-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-miscoffice-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-news-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-ocr-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-pdf-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-pkg-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-text-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-webarchive-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-xml-module 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-xmp-commons 3.2.3 2.9.2
↑ org.apache.tika/tika-parser-zip-commons 3.2.3 2.9.2
↑ org.apache.tika/tika-parsers-standard-package 3.2.3 2.9.2
↑ org.bouncycastle/bcpkix-jdk18on 1.81 1.79
↑ org.bouncycastle/bcprov-jdk18on 1.81 1.79
↑ org.bouncycastle/bcutil-jdk18on 1.81 1.79
↑ org.json/json 20250517 20240303
↑ org.mybatis/mybatis-spring 3.0.5 3.0.4
↑ org.netpreserve/jwarc 0.32.0 0.29.0
↑ org.objectweb.asm/asm 9.8 9.7.1
↑ org.slf4j/jcl-over-slf4j 2.0.17 2.0.10
↑ org.springframework.security/spring-security-core 6.4.11 6.3.9
↑ org.springframework.security/spring-security-crypto 6.4.11 6.3.9
↑ org.springframework.security/spring-security-oauth2-client 6.4.11 6.3.9
↑ org.springframework.security/spring-security-oauth2-core 6.4.11 6.3.9
↑ org.springframework.security/spring-security-oauth2-jose 6.4.11 6.3.9
↑ org.springframework.security/spring-security-oauth2-resource-server 6.4.11 6.3.9
↑ org.springframework.security/spring-security-web 6.4.11 6.3.9
↑ org.springframework/spring-aop 6.2.11 6.2.2
↑ org.springframework/spring-beans 6.2.11 6.2.2
↑ org.springframework/spring-context 6.2.11 6.2.2
↑ org.springframework/spring-context-support 6.2.11 6.2.2
↑ org.springframework/spring-core 6.2.11 6.2.2
↑ org.springframework/spring-expression 6.2.11 6.2.2
↑ org.springframework/spring-jdbc 6.2.11 6.2.2
↑ org.springframework/spring-jms 6.2.11 6.2.2
↑ org.springframework/spring-messaging 6.2.11 6.2.2
↑ org.springframework/spring-orm 6.2.11 6.2.2
↑ org.springframework/spring-tx 6.2.11 6.2.2
↑ org.springframework/spring-web 6.2.11 6.2.2
↑ org.springframework/spring-webmvc 6.2.11 6.2.2
+ org.apache.pdfbox/pdfbox-io 3.0.5
+ org.bouncycastle/bcjmail-jdk18on 1.81
+ org.jsoup/jsoup 1.21.1
- commons-lang/commons-lang 2.6
- org.bouncycastle/bcmail-jdk18on 1.79
- org.ccil.cowan.tagsoup.CommandLine/tagsoup 1.2.1
SHARE: alfresco-share
Provenance: https://github.com/Alfresco/alfresco-docker-base-tomcat
Size: 654 MB (+3 MB)
Packages: 199 (-8)
## Environment Variables
APR_LIBDIR=/usr/local/tomcat/apr
CATALINA_HOME=/usr/local/tomcat
JAVA_HOME=/etc/alternatives/jre
LANG=C.UTF-8
LC_ALL=C.UTF-8
LD_LIBRARY_PATH=/usr/local/tomcat/native-jni-lib:/usr/local/tomcat/apr
PATH=/usr/local/tomcat/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
TOMCAT_NATIVE_LIBDIR=/usr/local/tomcat/native-jni-lib
## Labels
org.label-schema.build-date=2025-07-14T10:18:17Z
org.label-schema.description=Apache Tomcat Image tailored for Alfresco products
org.label-schema.name=Alfresco Base Tomcat Image
org.label-schema.schema-version=1.0
org.label-schema.url=https://github.com/Alfresco/alfresco-docker-base-tomcat
org.label-schema.vcs-ref=https://github.com/Alfresco/alfresco-docker-base-tomcat
org.label-schema.vcs-url=https://github.com/Alfresco/alfresco-docker-base-tomcat
org.label-schema.vendor=Hyland
org.opencontainers.image.authors=Alfresco OPS-Readiness
org.opencontainers.image.created=2025-07-14T10:18:17Z
org.opencontainers.image.description=Apache Tomcat Image tailored for Alfresco products
org.opencontainers.image.revision=584
org.opencontainers.image.source=https://github.com/Alfresco/alfresco-docker-base-tomcat
org.opencontainers.image.title=Alfresco Base Tomcat Image
org.opencontainers.image.url=https://github.com/Alfresco/alfresco-docker-base-tomcat
org.opencontainers.image.vendor=Hyland
quay.expires-after=NEVER
## Packages and Vulnerabilities
+ 0 packages added
- 8 packages removed
⎌ 44 packages changed (↑ 44 upgraded, ↓ 0 downgraded)
155 packages unchanged
Package Version Previous
↑ com.google.code.gson/gson 2.12.1 2.10.1
↑ com.nimbusds/nimbus-jose-jwt 10.0.2 9.37.3
↑ commons-io/commons-io 2.20.0 2.18.0
↑ commons-logging/commons-logging 1.3.5 1.3.3
↑ io.micrometer/micrometer-commons 1.14.12 1.14.8
↑ io.micrometer/micrometer-observation 1.14.12 1.14.8
↑ joda-time/joda-time 2.14.0 2.13.1
↑ org.alfresco.encryptor.ShareStringEncryption/alfresco-share-encryption 25.3.0.56 25.2.0.46
↑ org.alfresco.surf/spring-cmis-framework 10.1 10.0
↑ org.alfresco.surf/spring-surf 10.1 10.0
↑ org.alfresco.surf/spring-surf-api 10.1 10.0
↑ org.alfresco/aikau 1.1.4 1.1.3
↑ org.alfresco/alfresco-core 25.3.0.81 25.2.0.64
↑ org.alfresco/alfresco-mmt 25.3.0.81 25.2.0.64
↑ org.alfresco/alfresco-web-framework-commons 25.3.0.56 25.2.0.46
↑ org.apache.commons/commons-lang3 3.18.0 3.4
↑ org.apache.cxf/cxf-core 4.1.1 4.1.0
↑ org.apache.cxf/cxf-rt-bindings-soap 4.1.1 4.1.0
↑ org.apache.cxf/cxf-rt-bindings-xml 4.1.1 4.1.0
↑ org.apache.cxf/cxf-rt-databinding-jaxb 4.1.1 4.1.0
↑ org.apache.cxf/cxf-rt-frontend-jaxws 4.1.1 4.1.0
↑ org.apache.cxf/cxf-rt-frontend-simple 4.1.1 4.1.0
↑ org.apache.cxf/cxf-rt-transports-http 4.1.1 4.1.0
↑ org.apache.cxf/cxf-rt-ws-addr 4.1.1 4.1.0
↑ org.apache.cxf/cxf-rt-ws-policy 4.1.1 4.1.0
↑ org.apache.cxf/cxf-rt-wsdl 4.1.1 4.1.0
↑ org.springframework.security/spring-security-core 6.5.6 6.4.4
↑ org.springframework.security/spring-security-crypto 6.5.6 6.4.4
↑ org.springframework.security/spring-security-oauth2-client 6.5.6 6.4.4
↑ org.springframework.security/spring-security-oauth2-core 6.5.6 6.4.4
↑ org.springframework.security/spring-security-oauth2-jose 6.5.6 6.4.4
↑ org.springframework.security/spring-security-web 6.5.6 6.4.4
↑ org.springframework/spring-aop 6.2.11 6.2.2
↑ org.springframework/spring-beans 6.2.12 6.2.8
↑ org.springframework/spring-context 6.2.11 6.2.2
↑ org.springframework/spring-core 6.2.12 6.2.8
↑ org.springframework/spring-expression 6.2.11 6.2.2
↑ org.springframework/spring-jcl 6.2.12 6.2.8
↑ org.springframework/spring-jdbc 6.2.11 6.2.2
↑ org.springframework/spring-orm 6.2.11 6.2.2
↑ org.springframework/spring-test 6.2.12 6.2.8
↑ org.springframework/spring-tx 6.2.11 6.2.2
↑ org.springframework/spring-web 6.2.12 6.2.8
↑ org.springframework/spring-webmvc 6.2.12 6.2.8
- jakarta.jws/jakarta.jws-api 3.0.0
- jakarta.mail/jakarta.mail-api 2.1.3
- org.eclipse.angus/angus-core 2.0.3
- org.eclipse.angus/angus-mail 2.0.3
- org.eclipse.angus/imap 2.0.3
- org.eclipse.angus/logging-mailhandler 2.0.3
- org.eclipse.angus/pop3 2.0.3
- org.eclipse.angus/smtp 2.0.3
TRANSFORM: alfresco/alfresco-transform-core-aio
Provenance: https://github.com/Alfresco/alfresco-docker-base-java
Size: 1800 MB (-4 MB)
Packages: 38 (+0)
## Environment Variables
ALFRESCO_PDF_RENDERER_ARM64_LIB_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repositories/releases/org/alfresco/alfresco-pdf-renderer/1.2/alfresco-pdf-renderer-1.2-linux-arm.tgz
ALFRESCO_PDF_RENDERER_LIB_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repositories/releases/org/alfresco/alfresco-pdf-renderer/1.2/alfresco-pdf-renderer-1.2-linux.tgz
IMAGEMAGICK_DEP_RPM_URL=https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
IMAGEMAGICK_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repositories/thirdparty/org/imagemagick/imagemagick-distribution/7.1.0-16-ci-10/imagemagick-distribution-7.1.0-16-ci-10
JAVA_HOME=/etc/alternatives/jre
JAVA_OPTS=
LANG=C.UTF-8
LC_ALL=C.UTF-8
LIBREOFFICE_ARM64_RPM_URL=https://dl.rockylinux.org/pub/rocky/9/devel/aarch64/os/Packages/l/
LIBREOFFICE_ARM64_RPM_VERSION=libreoffice-7.1.8.1
LIBREOFFICE_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repositories/thirdparty/org/libreoffice/libreoffice-dist/7.2.5/libreoffice-dist-7.2.5-linux.gz
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
## Labels
org.label-schema.build-date=2025-02-17T02:37:20Z
org.label-schema.name=Alfresco Base Java Image
org.label-schema.schema-version=1.0
org.label-schema.vendor=Alfresco
org.opencontainers.image.created=2025-02-17T02:37:20Z
org.opencontainers.image.revision=338
org.opencontainers.image.source=https://github.com/Alfresco/alfresco-docker-base-java
org.opencontainers.image.title=Alfresco Base Java Image
org.opencontainers.image.vendor=Alfresco
## Packages and Vulnerabilities
+ 0 packages added
- 0 packages removed
⎌ 0 packages changed (↑ 0 upgraded, ↓ 0 downgraded)
38 packages unchanged
SEARCH: alfresco/alfresco-search-services
Provenance: https://github.com/Alfresco/alfresco-docker-base-java
Size: 711 MB (+0 MB)
Packages: 206 (-1)
## Environment Variables
+ SOLR_ZIP=alfresco-search-services-2.0.17.zip
- SOLR_ZIP=alfresco-search-services-2.0.16.zip
DIST_DIR=/opt/alfresco-search-services
JAVA_HOME=/etc/alternatives/jre
LANG=C.UTF-8
LC_ALL=C.UTF-8
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
SOLR_DATA_DIR_ROOT=/opt/alfresco-search-services/data
SOLR_SOLR_MODEL_DIR=/opt/alfresco-search-services/data/alfrescoModels
## Labels
creator=Alfresco
maintainer=Alfresco
org.label-schema.build-date=2025-05-19T02:50:27Z
org.label-schema.name=Alfresco Base Java Image
org.label-schema.schema-version=1.0
org.label-schema.vendor=Alfresco
org.opencontainers.image.created=2025-05-19T02:50:27Z
org.opencontainers.image.revision=356
org.opencontainers.image.source=https://github.com/Alfresco/alfresco-docker-base-java
org.opencontainers.image.title=Alfresco Base Java Image
org.opencontainers.image.vendor=Alfresco
## Packages and Vulnerabilities
+ 0 packages added
- 1 packages removed
⎌ 39 packages changed (↑ 39 upgraded, ↓ 0 downgraded)
167 packages unchanged
Package Version Previous
↑ org.alfresco/alfresco-search 2.0.17 2.0.16
↑ org.alfresco/alfresco-solrclient-lib 2.0.17 2.0.16
↑ org.apache.commons/commons-lang3 3.18.0 3.12.0
↑ org.apache.cxf/cxf-core 3.6.6 3.6.5
↑ org.apache.cxf/cxf-rt-bindings-soap 3.6.6 3.6.5
↑ org.apache.cxf/cxf-rt-bindings-xml 3.6.6 3.6.5
↑ org.apache.cxf/cxf-rt-databinding-jaxb 3.6.6 3.6.5
↑ org.apache.cxf/cxf-rt-frontend-jaxws 3.6.6 3.6.5
↑ org.apache.cxf/cxf-rt-frontend-simple 3.6.6 3.6.5
↑ org.apache.cxf/cxf-rt-ws-addr 3.6.6 3.6.5
↑ org.apache.cxf/cxf-rt-ws-policy 3.6.6 3.6.5
↑ org.apache.cxf/cxf-rt-wsdl 3.6.6 3.6.5
↑ org.apache.lucene/lucene-analyzers-common 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-analyzers-icu 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-analyzers-kuromoji 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-analyzers-morfologik 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-analyzers-phonetic 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-analyzers-smartcn 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-analyzers-stempel 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-backward-codecs 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-classification 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-codecs 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-core 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-expressions 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-grouping 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-highlighter 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-join 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-memory 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-misc 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-queries 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-queryparser 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-sandbox 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-spatial-extras 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.lucene/lucene-suggest 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.solr/solr-analysis-extras 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.solr/solr-clustering 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.solr/solr-core 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.solr/solr-langid 6.6.5-patched.22 6.6.5-patched.21
↑ org.apache.solr/solr-solrj 6.6.5-patched.22 6.6.5-patched.21
- commons-lang/commons-lang 2.6
3rd Party Components installed in the docker containers
- Rocky Linux 9.3
- OpenJDK 17.0.15
- Apache Tomcat 10.1.43.0
- Jetty 9.4.57.v20241219
- Angular 19.2.6
Issues Addressed
We have addressed a number of bugs since the last release of Alfresco Content Services 25.2, including fixes in repository, search, indexing and UI components.
- MNT-25422 – Corrected behaviour of bulleted and numbered lists and underline formatting when adding comments in files.
- MNT-25393 – AGS REST API
POST retention-schedule now accepts the rma:dateFiled property as expected.
- MNT-25303 – Restored consistent behaviour for legacy Slingshot URLs between ACS 23.2 and ACS 25.x.
- MNT-25278 – Made creation of IPRW groups for repository-native objects filed as records thread-safe.
- MNT-25267 – Fixed search failures caused by “entity content is too long for the configured buffer limit”.
- MNT-25250 – Ensured Extract Metadata is applied when content is updated.
- MNT-25242 – Corrected JavaScript context handling that had been affected by MNT-23158.
- MNT-25234 – Clarified and fixed behaviour for
system.thumbnail.generate=true in relation to content indexing.
- MNT-25232 – Improved performance when loading security-group constraints for folder rules on large repositories.
- MNT-25231 – Fixed Site Notice dashlet link editor so text colour changes are preserved after saving.
- MNT-25201 – Ensured
cm:isContentIndexed = false works correctly when used in folder rules.
- MNT-25150 – Aligned ownership permission checks when using both transactional and eventual consistency search.
- MNT-25145 – Resolved timeouts when loading rules configuration due to action constraints.
- MNT-24975 – Prevented creation of duplicate IPRW (write) groups when filing documents as records.
- MNT-24530 – Fixed RSS subscription behaviour so that browser authentication prompts appear correctly on ACS 23.x and above.
- MNT-24308 – Corrected visual behaviour of “My Favorites” in the Document Library so favorites links are not shown as disabled.
Security Issues fixed
- CVE-2025-54988 – Addressed vulnerability in Apache Tika core used by the platform.
- CVE-2025-48913 – Hardened JMS configuration to avoid potential code execution via untrusted RMI or LDAP endpoints in Apache CXF.
- CVE-2025-7962 – Resolved SMTP injection issue related to line break handling in Jakarta Mail.
- CVE-2025-41242 – Fixed issue in
spring-webmvc-6.2.8.jar used by ACS components.
- CVE-2025-48989 – Updated
tomcat-embed-core 9.0.60 used by APS 2.x.
- CVE-2025-48924 – Updated
commons-lang3-3.12.0.jar used by APS 2.x.
- CVE-2025-53864 – Addressed vulnerability in
nimbus-jose-jwt-9.37.3.jar used in ACS external services.
- CVE-2025-55754 – Fixed issue in
tomcat-juli-10.1.41.jar used by ATS.
- CVE-2025-55752 – Fixed issue in
tomcat-embed-core-10.1.44.jar used by ATS.
Known Issues
None
Previous Versions
Available in History of Alfresco Versions
