Hyland Community
Help
cancel
Turn on suggestions
Showing results for 
Search instead for 
Did you mean: 

Alfresco Community Edition 25.1 Release Notes

angelborroy
Community Manager Community Manager
Community Manager
‎03-19-2025 07:25 AM

This release contains enhancements completed for the release of Alfresco Content Services 25.1. In addition, this release contains an updated stack of supported databases, operating systems and platforms providing up to date support.

Installation

Alfresco Community Edition 25.1 is available as a distribution zip file for manual installation, or it can be installed using an Ansible playbook (Linux only) for non-containerized environments. It is also available as a set of Docker images that can be deployed in containerized environments using docker-compose or Helm charts (for Kubernetes).

You can find a summary of these options here:

https://support.hyland.com/r/Alfresco/Alfresco-Content-Services-Community-Edition/25.1/Alfresco-Cont...

ZIP Distribution files

Ansible

Deployment resources available in Alfresco/alfresco-ansible-deployment

Docker Compose

Reference Docker Compose template is available in community-docker-compose.yml

Additional Docker Compose deployment methods:

Alfresco Community Kubernetes deployment tool available in https://github.com/aborroy/alf-k8s

Upgrading from previous releases

Care should be taken when upgrading from any previous releases of Alfresco Community Edition. There are some steps that should be reviewed and planned before you upgrade. Please take the time to familiarize yourself with the guidance below and plan your upgrade.

Please refer to the detailed Upgrading documentation, including Alfresco Content Services upgrade paths.

In particular, please ensure that the following steps are completed before you start your upgrade process:

  • Ensure that you have a functional backup of your Alfresco Repository and your Alfresco Database, before starting the upgrade process
  • Download and run the Alfresco Extension Inspector to understand, which customization or library items need to be reviewed or updated prior to starting
  • Review all new and deprecated features included in this release note
  • Review and implement the new supported stack options and the minimum versions of modules/extensions required, and update as necessary for the new deployment
  • Apply the recommended database optimization patch for larger implementations (see upgrade documentation for details)

Specific Release Components

Alfresco Mobile

The latest release of Alfresco Mobile Workspace is 1.11 and is compatible with Alfresco Content Services 25.1.

SDK

The latest release of the Alfresco in-process SDK is SDK 4.11, which is compatible with Alfresco Content Services 25.1.
The latest release of the Alfresco out-of-process Event SDK is SDK 7.1.0, which is compatible with Alfresco Content Services 25.1.

Documentation

The documentation has been refreshed for this release: https://support.hyland.com/p/alfresco

Localization

The Content Repository supports the following languages: French, German, Italian, Spanish, Japanese, Dutch, Norwegian (Bokmål), Russian, Brazilian Portuguese, Polish, Czech, Danish, Swedish, Finnish and Simplified Chinese.

Share supports the following languages: French, German, Italian, Spanish, Japanese, Dutch, Norwegian (Bokmål), Russian, Brazilian Portuguese and Simplified Chinese.

Alfresco Content Application supports the following languages: French, German, Italian, Spanish, Japanese, Dutch, Norwegian (Bokmål), Russian, Brazilian Portuguese, Polish, Czech, Danish, Swedish, Finnish and Simplified Chinese.

Contents

Images are available on Docker Hub

Following Docker Images are available in both AMD64 and ARCH64 architectures:

The source code for the packaging project that is used to create and run Docker images and build the distribution zip can be found here (https://github.com/Alfresco/acs-community-packaging/releases/tag/25.1.0 ).

REPOSITORY: alfresco-content-repository-community

docker scout compare --only-package-type maven --only-severity critical --ignore-unchanged \
alfresco/alfresco-content-repository-community:25.1.0 \
--to alfresco/alfresco-content-repository-community:23.4.1  
  
      Provenance: https://github.com/Alfresco/alfresco-docker-base-tomcat
      Size: 688 MB (+140 MB)
      Packages: 392 (+0)
      Base image: rockylinux:9
  
  
  ## Environment Variables
  
  
    + APR_LIBDIR=/usr/local/tomcat/apr
      CATALINA_HOME=/usr/local/tomcat
    - JAVA_HOME=/etc/alternatives/jre
    + JAVA_HOME=/usr/lib/jvm/java-openjdk
      LANG=C.UTF-8
      LC_ALL=C.UTF-8
    - LD_LIBRARY_PATH=/usr/local/tomcat/native-jni-lib
    + LD_LIBRARY_PATH=/usr/local/tomcat/native-jni-lib:/usr/local/tomcat/apr
      PATH=/usr/local/tomcat/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
      TOMCAT_NATIVE_LIBDIR=/usr/local/tomcat/native-jni-lib
  
  
  
  ## Labels
  
  
    - org.label-schema.build-date=2024-08-05T02:48:27Z
    + org.label-schema.build-date=2025-02-24T16:37:33Z
      org.label-schema.description=Apache Tomcat Image tailored for Alfresco products
      org.label-schema.name=Alfresco Base Tomcat Image
      org.label-schema.schema-version=1.0
      org.label-schema.url=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.label-schema.vcs-ref=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.label-schema.vcs-url=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.label-schema.vendor=Hyland
      org.opencontainers.image.authors=Alfresco OPS-Readiness
    - org.opencontainers.image.created=2024-08-05T02:48:27Z
    + org.opencontainers.image.created=2025-02-24T16:37:33Z
      org.opencontainers.image.description=Apache Tomcat Image tailored for Alfresco products
    - org.opencontainers.image.revision=412
    + org.opencontainers.image.revision=512
      org.opencontainers.image.source=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.opencontainers.image.title=Alfresco Base Tomcat Image
      org.opencontainers.image.url=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.opencontainers.image.vendor=Hyland
  
  
  
  ## Packages and Vulnerabilities
  
  
    +   17 packages added  
    -   18 packages removed  
    ⎌  110 packages changed (↑ 110 upgraded, ↓ 0 downgraded)  
       259 packages unchanged
  
  
  
  
     Package                                                              Version        Previous
  
  ↑  catalina-ant/catalina-ant                                            10.1.36        10.1.26           
  +  checker-qual/checker-qual                                            3.48.3                           
  ↑  com.google.code.gson/gson                                            2.12.1         2.11.0            
  ↑  com.google.errorprone/error_prone_annotations                        2.36.0         2.27.0            
  ↑  com.nimbusds/oauth2-oidc-sdk                                         9.43.6         9.43.4            
  ↑  commons-codec/commons-codec                                          1.18.0         1.17.1            
  ↑  commons-daemon/commons-daemon                                        1.4.1          1.4.0             
  ↑  commons-io/commons-io                                                2.18.0         2.17.0            
  ↑  io.micrometer/micrometer-commons                                     1.14.3         1.12.11           
  ↑  io.micrometer/micrometer-observation                                 1.14.3         1.12.11           
  ↑  io.netty/netty-buffer                                                4.1.118.Final  4.1.113.Final     
  ↑  io.netty/netty-codec                                                 4.1.118.Final  4.1.113.Final     
  ↑  io.netty/netty-codec-http                                            4.1.118.Final  4.1.113.Final     
  ↑  io.netty/netty-codec-socks                                           4.1.118.Final  4.1.113.Final     
  ↑  io.netty/netty-common                                                4.1.118.Final  4.1.113.Final     
  ↑  io.netty/netty-handler                                               4.1.118.Final  4.1.113.Final     
  ↑  io.netty/netty-handler-proxy                                         4.1.118.Final  4.1.113.Final     
  ↑  io.netty/netty-resolver                                              4.1.118.Final  4.1.113.Final     
  ↑  io.netty/netty-tcnative-classes                                      2.0.70.Final   2.0.66.Final      
  ↑  io.netty/netty-transport                                             4.1.118.Final  4.1.113.Final     
  ↑  io.netty/netty-transport-classes-epoll                               4.1.118.Final  4.1.113.Final     
  ↑  io.netty/netty-transport-classes-kqueue                              4.1.118.Final  4.1.113.Final     
  ↑  io.netty/netty-transport-native-epoll                                4.1.118.Final  4.1.113.Final     
  ↑  io.netty/netty-transport-native-kqueue                               4.1.118.Final  4.1.113.Final     
  ↑  io.netty/netty-transport-native-unix-common                          4.1.118.Final  4.1.113.Final     
  ↑  joda-time/joda-time                                                  2.13.1         2.13.0            
  ↑  jrt-fs/jrt-fs                                                        17.0.14        17.0.12           
  +  kxml2/kxml2                                                          2.3.0                            
  ↑  net.minidev/accessors-smart                                          2.5.2          2.5.1             
  ↑  net.minidev/json-smart                                               2.5.2          2.5.1             
  ↑  ognl/ognl                                                            3.4.3          3.4.2             
  ↑  org.alfresco.surf/spring-surf-core                                   10.0           9.4               
  ↑  org.alfresco.surf/spring-surf-core-configservice                     10.0           9.4               
  ↑  org.alfresco.surf/spring-webscripts                                  10.0           9.4               
  ↑  org.alfresco.surf/spring-webscripts-api                              10.0           9.4               
  ↑  org.alfresco/acs-event-model                                         1.0.2          0.0.33            
  ↑  org.alfresco/alfresco-core                                           25.1.0.71      23.4.1.1          
  ↑  org.alfresco/alfresco-data-model                                     25.1.0.71      23.4.1.1          
  ↑  org.alfresco/alfresco-greenmail                                      7.1            7.0               
  ↑  org.alfresco/alfresco-mmt                                            25.1.0.71      23.4.1.1          
  ↑  org.alfresco/alfresco-remote-api                                     25.1.0.71      23.4.1.1          
  ↑  org.alfresco/alfresco-repository                                     25.1.0.71      23.4.1.1          
  ↑  org.alfresco/alfresco-share-services                                 25.1.0.71      23.4.1.1          
  ↑  org.alfresco/alfresco-transform-model                                5.1.7          5.1.5             
  ↑  org.apache.activemq/activemq-client-jakarta                          5.18.6         5.18.3            
  ↑  org.apache.catalina.startup.Bootstrap/bootstrap                      10.1.36        10.1.26           
  ↑  org.apache.cxf/cxf-core                                              4.1.0          4.0.5             
  ↑  org.apache.cxf/cxf-rt-bindings-soap                                  4.1.0          4.0.5             
  ↑  org.apache.cxf/cxf-rt-bindings-xml                                   4.1.0          4.0.5             
  ↑  org.apache.cxf/cxf-rt-databinding-jaxb                               4.1.0          4.0.5             
  ↑  org.apache.cxf/cxf-rt-frontend-jaxws                                 4.1.0          4.0.5             
  ↑  org.apache.cxf/cxf-rt-frontend-simple                                4.1.0          4.0.5             
  ↑  org.apache.cxf/cxf-rt-transports-http                                4.1.0          4.0.5             
  ↑  org.apache.cxf/cxf-rt-ws-addr                                        4.1.0          4.0.5             
  ↑  org.apache.cxf/cxf-rt-ws-policy                                      4.1.0          4.0.5             
  ↑  org.apache.cxf/cxf-rt-wsdl                                           4.1.0          4.0.5             
  ↑  org.apache.httpcomponents.client5/httpclient5                        5.4.1          5.2.1             
  ↑  org.apache.httpcomponents.core5/httpcore5                            5.3.3          5.3               
  ↑  org.apache.httpcomponents.core5/httpcore5-h2                         5.3.1          5.2               
  ↑  org.apache.logging.log4j/log4j-api                                   2.24.3         2.23.1            
  ↑  org.apache.logging.log4j/log4j-core                                  2.24.3         2.23.1            
  ↑  org.apache.logging.log4j/log4j-slf4j2-impl                           2.24.3         2.23.1            
  ↑  org.apache.neethi/neethi                                             3.2.1          3.2.0             
  ↑  org.apache.santuario/xmlsec                                          4.0.3          4.0.2             
  +  org.apache.tomcat-annotations-api/annotations-api                    2.1.1                            
  +  org.apache.tomcat-catalina-ha/catalina-ha                            10.1.36                          
  +  org.apache.tomcat-catalina/catalina                                  10.1.36                          
  +  org.apache.tomcat-coyote-ffm/tomcat-coyote-ffm                       10.1.36                          
  +  org.apache.tomcat-el-api/el-api                                      5.0                              
  +  org.apache.tomcat-jasper-el/jasper-el                                10.1.36                          
  +  org.apache.tomcat-jasper/jasper                                      10.1.36                          
  +  org.apache.tomcat-jaspic-api/jaspic-api                              3.0                              
  +  org.apache.tomcat-jsp-api/jsp-api                                    3.1                              
  +  org.apache.tomcat-servlet-api/servlet-api                            6.0                              
  +  org.apache.tomcat-ssi/catalina-ssi                                   10.1.36                          
  +  org.apache.tomcat-storeconfig/catalina-storeconfig                   10.1.36                          
  +  org.apache.tomcat-tribes/catalina-tribes                             10.1.36                          
  +  org.apache.tomcat-websocket-api/websocket-api                        10.1.36                          
  +  org.apache.tomcat-websocket-client-api/websocket-client-api          10.1.36                          
  ↑  org.apache.tomcat/jakartaee-migration                                1.0.9          1.0.8             
  ↑  org.apache.tomcat/tomcat-api                                         10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-coyote                                      10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-dbcp                                        10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-i18n-cs                                     10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-i18n-de                                     10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-i18n-es                                     10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-i18n-fr                                     10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-i18n-ja                                     10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-i18n-ko                                     10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-i18n-pt-BR                                  10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-i18n-ru                                     10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-i18n-zh-CN                                  10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-jdbc                                        10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-jni                                         10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-juli                                        10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-util                                        10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-util-scan                                   10.1.36        10.1.26           
  ↑  org.apache.tomcat/tomcat-websocket                                   10.1.36        10.1.26           
  ↑  org.apache.xmlbeans/xmlbeans                                         5.2.2          5.2.1             
  ↑  org.bouncycastle/bcmail-jdk18on                                      1.79           1.78.1            
  ↑  org.bouncycastle/bcpkix-jdk18on                                      1.79           1.78.1            
  ↑  org.bouncycastle/bcprov-jdk18on                                      1.79           1.78.1            
  ↑  org.bouncycastle/bcutil-jdk18on                                      1.79           1.78.1            
  ↑  org.mybatis/mybatis                                                  3.5.17         3.5.16            
  ↑  org.objectweb.asm/asm                                                9.7.1          9.7               
  ↑  org.postgresql/postgresql                                            42.7.5         42.7.4            
  ↑  org.quartz-scheduler/quartz                                          2.5.0          2.3.2             
  ↑  org.springframework.security/spring-security-core                    6.3.7          6.3.4             
  ↑  org.springframework.security/spring-security-crypto                  6.3.7          6.3.4             
  ↑  org.springframework.security/spring-security-oauth2-client           6.3.7          6.3.4             
  ↑  org.springframework.security/spring-security-oauth2-core             6.3.7          6.3.4             
  ↑  org.springframework.security/spring-security-oauth2-jose             6.3.7          6.3.4             
  ↑  org.springframework.security/spring-security-oauth2-resource-server  6.3.7          6.3.4             
  ↑  org.springframework.security/spring-security-web                     6.3.7          6.3.4             
  ↑  org.springframework/spring-aop                                       6.2.2          6.1.14            
  ↑  org.springframework/spring-beans                                     6.2.2          6.1.14            
  ↑  org.springframework/spring-context                                   6.2.2          6.1.14            
  ↑  org.springframework/spring-context-support                           6.2.2          6.1.14            
  ↑  org.springframework/spring-core                                      6.2.2          6.1.14            
  ↑  org.springframework/spring-expression                                6.2.2          6.1.14            
  ↑  org.springframework/spring-jdbc                                      6.2.2          6.1.14            
  ↑  org.springframework/spring-jms                                       6.2.2          6.1.14            
  ↑  org.springframework/spring-messaging                                 6.2.2          6.1.14            
  ↑  org.springframework/spring-orm                                       6.2.2          6.1.14            
  ↑  org.springframework/spring-tx                                        6.2.2          6.1.14            
  ↑  org.springframework/spring-web                                       6.2.2          6.1.14            
  ↑  org.springframework/spring-webmvc                                    6.2.2          6.1.14

SHARE: alfresco-share

docker scout compare --only-package-type maven --only-severity critical --ignore-unchanged \
alfresco/alfresco-share:25.1.0 \
--to alfresco/alfresco-share:23.4.0

      Provenance: https://github.com/Alfresco/alfresco-docker-base-tomcat
      Size: 423 MB (+143 MB)                                       
      Packages: 212 (+6)                                               
      Base image: rockylinux:9

  ## Environment Variables


    + APR_LIBDIR=/usr/local/tomcat/apr
      CATALINA_HOME=/usr/local/tomcat
    - JAVA_HOME=/etc/alternatives/jre
    + JAVA_HOME=/usr/lib/jvm/java-openjdk
      LANG=C.UTF-8
      LC_ALL=C.UTF-8
    - LD_LIBRARY_PATH=/usr/local/tomcat/native-jni-lib
    + LD_LIBRARY_PATH=/usr/local/tomcat/native-jni-lib:/usr/local/tomcat/apr
      PATH=/usr/local/tomcat/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
      TOMCAT_NATIVE_LIBDIR=/usr/local/tomcat/native-jni-lib



  ## Labels


    - org.label-schema.build-date=2024-08-05T02:48:27Z
    + org.label-schema.build-date=2025-02-24T16:37:33Z
      org.label-schema.description=Apache Tomcat Image tailored for Alfresco products
      org.label-schema.name=Alfresco Base Tomcat Image
      org.label-schema.schema-version=1.0
      org.label-schema.url=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.label-schema.vcs-ref=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.label-schema.vcs-url=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.label-schema.vendor=Hyland
      org.opencontainers.image.authors=Alfresco OPS-Readiness
    - org.opencontainers.image.created=2024-08-05T02:48:27Z
    + org.opencontainers.image.created=2025-02-24T16:37:33Z
      org.opencontainers.image.description=Apache Tomcat Image tailored for Alfresco products
    - org.opencontainers.image.revision=412
    + org.opencontainers.image.revision=512
      org.opencontainers.image.source=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.opencontainers.image.title=Alfresco Base Tomcat Image
      org.opencontainers.image.url=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.opencontainers.image.vendor=Hyland
      quay.expires-after=NEVER



  ## Packages and Vulnerabilities


    +   23 packages added
    -   18 packages removed
    ⎌   79 packages changed (↑ 79 upgraded, ↓ 0 downgraded)
       105 packages unchanged


     Package                                                                 Version    Previous

  -  annotations-api/annotations-api                                                    2.1.1
  ↑  catalina-ant/catalina-ant                                               10.1.36    10.1.26
  -  catalina-ha/catalina-ha                                                            10.1.26
  -  catalina-ssi/catalina-ssi                                                          10.1.26
  -  catalina-storeconfig/catalina-storeconfig                                          10.1.26
  -  catalina-tribes/catalina-tribes                                                    10.1.26
  -  catalina/catalina                                                                  10.1.26
  ↑  com.fasterxml.woodstox/woodstox-core                                    7.1.0      6.4.0
  ↑  com.nimbusds/oauth2-oidc-sdk                                            9.43.6     9.43.4
  -  com.sun.xml.messaging.saaj/saaj-impl                                               1.5.3
  ↑  commons-codec/commons-codec                                             1.18.0     1.17.1
  ↑  commons-daemon/commons-daemon                                           1.4.1      1.4.0
  ↑  commons-io/commons-io                                                   2.18.0     2.17.0
  -  el-api/el-api                                                                      5.0
  ↑  io.micrometer/micrometer-commons                                        1.14.2     1.12.10
  ↑  io.micrometer/micrometer-observation                                    1.14.2     1.12.10
  ↑  jakarta.jws/jakarta.jws-api                                             3.0.0      2.1.0
  +  jakarta.mail/jakarta.mail-api                                           2.1.3
  ↑  jakarta.xml.soap/jakarta.xml.soap-api                                   3.0.2      1.4.2
  ↑  jakarta.xml.ws/jakarta.xml.ws-api                                       4.0.2      2.3.3
  -  jasper-el/jasper-el                                                                10.1.26
  -  jasper/jasper                                                                      10.1.26
  -  jaspic-api/jaspic-api                                                              3.0
  ↑  joda-time/joda-time                                                     2.13.1     2.13.0
  ↑  jrt-fs/jrt-fs                                                           17.0.14    17.0.12
  -  jsp-api/jsp-api                                                                    3.1
  ↑  net.java.dev.msv/xsdlib                                                 2022.7     2013.6.1
  ↑  net.minidev/accessors-smart                                             2.5.2      2.4.9
  ↑  net.minidev/json-smart                                                  2.5.2      2.4.10
  ↑  org.alfresco.encryptor.ShareStringEncryption/alfresco-share-encryption  25.1.0.56  23.4.0.46
  ↑  org.alfresco.surf/spring-cmis-framework                                 10.0       9.2
  ↑  org.alfresco.surf/spring-surf                                           10.0       9.2
  ↑  org.alfresco.surf/spring-surf-api                                       10.0       9.2
  ↑  org.alfresco.surf/spring-surf-core                                      10.0       9.4
  ↑  org.alfresco.surf/spring-surf-core-configservice                        10.0       9.4
  ↑  org.alfresco.surf/spring-webscripts                                     10.0       9.4
  ↑  org.alfresco.surf/spring-webscripts-api                                 10.0       9.4
  ↑  org.alfresco/alfresco-core                                              25.1.0.71  23.4.0.67
  ↑  org.alfresco/alfresco-mmt                                               25.1.0.71  23.4.0.67
  ↑  org.alfresco/alfresco-web-framework-commons                             25.1.0.56  23.4.0.46
  ↑  org.apache.catalina.startup.Bootstrap/bootstrap                         10.1.36    10.1.26
  ↑  org.apache.cxf/cxf-core                                                 4.1.0      3.4.10
  ↑  org.apache.cxf/cxf-rt-bindings-soap                                     4.1.0      3.4.10
  ↑  org.apache.cxf/cxf-rt-bindings-xml                                      4.1.0      3.4.10
  ↑  org.apache.cxf/cxf-rt-databinding-jaxb                                  4.1.0      3.4.10
  ↑  org.apache.cxf/cxf-rt-frontend-jaxws                                    4.1.0      3.4.10
  ↑  org.apache.cxf/cxf-rt-frontend-simple                                   4.1.0      3.4.10
  ↑  org.apache.cxf/cxf-rt-transports-http                                   4.1.0      3.4.10
  ↑  org.apache.cxf/cxf-rt-ws-addr                                           4.1.0      3.4.10
  ↑  org.apache.cxf/cxf-rt-ws-policy                                         4.1.0      3.4.10
  ↑  org.apache.cxf/cxf-rt-wsdl                                              4.1.0      3.4.10
  -  org.apache.geronimo.specs/geronimo-jta_1.1_spec                                    1.1.1
  ↑  org.apache.neethi/neethi                                                3.2.1      3.1.1
  +  org.apache.tomcat-annotations-api/annotations-api                       2.1.1
  +  org.apache.tomcat-catalina-ha/catalina-ha                               10.1.36
  +  org.apache.tomcat-catalina/catalina                                     10.1.36
  +  org.apache.tomcat-coyote-ffm/tomcat-coyote-ffm                          10.1.36
  +  org.apache.tomcat-el-api/el-api                                         5.0
  +  org.apache.tomcat-jasper-el/jasper-el                                   10.1.36
  +  org.apache.tomcat-jasper/jasper                                         10.1.36
  +  org.apache.tomcat-jaspic-api/jaspic-api                                 3.0
  +  org.apache.tomcat-jsp-api/jsp-api                                       3.1
  +  org.apache.tomcat-servlet-api/servlet-api                               6.0
  +  org.apache.tomcat-ssi/catalina-ssi                                      10.1.36
  +  org.apache.tomcat-storeconfig/catalina-storeconfig                      10.1.36
  +  org.apache.tomcat-tribes/catalina-tribes                                10.1.36
  +  org.apache.tomcat-websocket-api/websocket-api                           10.1.36
  +  org.apache.tomcat-websocket-client-api/websocket-client-api             10.1.36
  ↑  org.apache.tomcat/jakartaee-migration                                   1.0.9      1.0.8
  ↑  org.apache.tomcat/tomcat-api                                            10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-coyote                                         10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-dbcp                                           10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-i18n-cs                                        10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-i18n-de                                        10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-i18n-es                                        10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-i18n-fr                                        10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-i18n-ja                                        10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-i18n-ko                                        10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-i18n-pt-BR                                     10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-i18n-ru                                        10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-i18n-zh-CN                                     10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-jdbc                                           10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-jni                                            10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-juli                                           10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-util                                           10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-util-scan                                      10.1.36    10.1.26
  ↑  org.apache.tomcat/tomcat-websocket                                      10.1.36    10.1.26
  ↑  org.apache.ws.xmlschema/xmlschema-core                                  2.3.1      2.2.5
  +  org.eclipse.angus/angus-activation                                      2.0.2
  +  org.eclipse.angus/angus-core                                            2.0.3
  +  org.eclipse.angus/angus-mail                                            2.0.3
  +  org.eclipse.angus/imap                                                  2.0.3
  +  org.eclipse.angus/logging-mailhandler                                   2.0.3
  +  org.eclipse.angus/pop3                                                  2.0.3
  +  org.eclipse.angus/smtp                                                  2.0.3
  -  org.jvnet.staxex/stax-ex                                                           1.8.3
  ↑  org.objectweb.asm/asm                                                   9.7.1      9.4
  ↑  org.springframework.security/spring-security-core                       6.4.3      6.3.4
  ↑  org.springframework.security/spring-security-crypto                     6.4.3      6.3.4
  ↑  org.springframework.security/spring-security-oauth2-client              6.4.3      6.3.4
  ↑  org.springframework.security/spring-security-oauth2-core                6.4.3      6.3.4
  ↑  org.springframework.security/spring-security-oauth2-jose                6.4.3      6.3.4
  ↑  org.springframework.security/spring-security-web                        6.4.3      6.3.4
  ↑  org.springframework/spring-aop                                          6.2.2      6.1.14
  ↑  org.springframework/spring-beans                                        6.2.1      6.1.13
  ↑  org.springframework/spring-context                                      6.2.2      6.1.14
  ↑  org.springframework/spring-context-support                              6.2.0      6.1.13
  ↑  org.springframework/spring-core                                         6.2.1      6.1.13
  ↑  org.springframework/spring-expression                                   6.2.2      6.1.14
  ↑  org.springframework/spring-jcl                                          6.2.1      6.1.13
  ↑  org.springframework/spring-jdbc                                         6.2.2      6.1.14
  ↑  org.springframework/spring-orm                                          6.2.2      6.1.14
  ↑  org.springframework/spring-test                                         6.2.1      6.1.13
  ↑  org.springframework/spring-tx                                           6.2.2      6.1.14
  ↑  org.springframework/spring-web                                          6.2.1      6.1.13
  ↑  org.springframework/spring-webmvc                                       6.2.0      6.1.13
  -  servlet-api/servlet-api                                                            6.0
  -  tomcat-coyote-ffm/tomcat-coyote-ffm                                                10.1.26
  -  websocket-api/websocket-api                                                        @version@
  -  websocket-client-api/websocket-client-api                                          @version@@

TRANSFORM: alfresco/alfresco-transform-core-aio

docker scout compare --only-package-type maven --only-severity critical --ignore-unchanged \
alfresco/alfresco-transform-core-aio:5.1.7 \
--to alfresco/alfresco-transform-core-aio:5.1.5

      Provenance: https://github.com/Alfresco/alfresco-docker-base-java
      Size: 794 MB (-76 MB)
      Packages: 222 (-1)
      Base image: rockylinux:9

  ## Environment Variables


      ALFRESCO_PDF_RENDERER_ARM64_LIB_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repositories/releases/org/alfresco/alfresco-pdf-renderer/1.2/alfresco-pdf-renderer-1.2-linux-arm.tgz
      ALFRESCO_PDF_RENDERER_LIB_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repositories/releases/org/alfresco/alfresco-pdf-renderer/1.2/alfresco-pdf-renderer-1.2-linux.tgz
      IMAGEMAGICK_DEP_RPM_URL=https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
      IMAGEMAGICK_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repositories/thirdparty/org/imagemagick/imagemagick-distribution/7.1.0-16-ci-10/imagemagick-distribution-7.1.0-16-ci-10
      JAVA_HOME=/etc/alternatives/jre
      JAVA_OPTS=
      LANG=C.UTF-8
      LC_ALL=C.UTF-8
      LIBREOFFICE_ARM64_RPM_URL=https://dl.rockylinux.org/pub/rocky/9/devel/aarch64/os/Packages/l/
      LIBREOFFICE_ARM64_RPM_VERSION=libreoffice-7.1.8.1
      LIBREOFFICE_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repositories/thirdparty/org/libreoffice/libreoffice-dist/7.2.5/libreoffice-dist-7.2.5-linux.gz
      PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin



  ## Labels


    - org.label-schema.build-date=2024-10-14T02:37:43Z
    + org.label-schema.build-date=2025-02-17T02:37:20Z
      org.label-schema.name=Alfresco Base Java Image
      org.label-schema.schema-version=1.0
      org.label-schema.vendor=Alfresco
    - org.opencontainers.image.created=2024-10-14T02:37:43Z
    + org.opencontainers.image.created=2025-02-17T02:37:20Z
    - org.opencontainers.image.revision=303
    + org.opencontainers.image.revision=338
      org.opencontainers.image.source=https://github.com/Alfresco/alfresco-docker-base-java
      org.opencontainers.image.title=Alfresco Base Java Image
      org.opencontainers.image.vendor=Alfresco



  ## Packages and Vulnerabilities


    +    1 packages added
    -    1 packages removed
    ⎌   64 packages changed (↑ 64 upgraded, ↓ 0 downgraded)
       153 packages unchanged




     Package                                                       Version        Previous

  ↑  ch.qos.logback/logback-classic                                1.5.16         1.5.11
  ↑  ch.qos.logback/logback-core                                   1.5.16         1.5.11
  ↑  com.fasterxml.jackson.core/jackson-annotations                2.18.2         2.18.1
  ↑  com.fasterxml.jackson.core/jackson-core                       2.18.2         2.18.1
  ↑  com.fasterxml.jackson.core/jackson-databind                   2.18.2         2.18.1
  ↑  com.fasterxml.jackson.dataformat/jackson-dataformat-yaml      2.18.2         2.18.1
  ↑  com.fasterxml.jackson.datatype/jackson-datatype-jdk8          2.18.2         2.18.1
  ↑  com.fasterxml.jackson.datatype/jackson-datatype-jsr310        2.18.2         2.18.1
  ↑  com.fasterxml.jackson.module/jackson-module-parameter-names   2.18.2         2.18.1
  ↑  com.google.errorprone/error_prone_annotations                 2.36.0         2.28.0
  ↑  com.google.guava/guava                                        33.4.0-jre     33.3.1-jre
  ↑  commons-codec/commons-codec                                   1.17.2         1.17.1
  ↑  io.micrometer/micrometer-commons                              1.14.4         1.13.6
  ↑  io.micrometer/micrometer-core                                 1.14.4         1.13.6
  ↑  io.micrometer/micrometer-jakarta9                             1.14.4         1.13.6
  ↑  io.micrometer/micrometer-observation                          1.14.4         1.13.6
  ↑  io.micrometer/micrometer-registry-prometheus                  1.14.4         1.13.6
  ↑  io.projectreactor.reactor-core/reactor-core                   3.7.3          3.6.11
  ↑  io.prometheus/prometheus-metrics-config                       1.3.6          1.2.1
  ↑  io.prometheus/prometheus-metrics-core                         1.3.6          1.2.1
  ↑  io.prometheus/prometheus-metrics-exposition-formats           1.3.6          1.2.1
  +  io.prometheus/prometheus-metrics-exposition-textformats       1.3.6
  ↑  io.prometheus/prometheus-metrics-model                        1.3.6          1.2.1
  -  io.prometheus/prometheus-metrics-shaded-protobuf                             1.2.1
  ↑  io.prometheus/prometheus-metrics-tracer-common                1.3.6          1.2.1
  ↑  jrt-fs/jrt-fs                                                 17.0.14        17.0.12
  ↑  org.alfresco/alfresco-base-t-engine                           5.1.7          5.1.5
  ↑  org.alfresco/alfresco-transform-core-aio                      5.1.7          5.1.5
  ↑  org.alfresco/alfresco-transform-model                         5.1.7          5.1.5
  ↑  org.apache.activemq/activemq-client                           6.1.5          6.1.3
  ↑  org.apache.commons/commons-lang3                              3.17.0         3.14.0
  ↑  org.apache.commons/commons-pool2                              2.12.1         2.12.0
  ↑  org.apache.httpcomponents.client5/httpclient5                 5.4.2          5.3.1
  ↑  org.apache.httpcomponents.core5/httpcore5                     5.3.3          5.2.5
  ↑  org.apache.httpcomponents.core5/httpcore5-h2                  5.3.3          5.2.5
  ↑  org.apache.logging.log4j/log4j-api                            2.24.3         2.23.1
  ↑  org.apache.logging.log4j/log4j-to-slf4j                       2.24.3         2.23.1
  ↑  org.apache.tomcat.embed/tomcat-embed-core                     10.1.36        10.1.31
  ↑  org.apache.tomcat.embed/tomcat-embed-el                       10.1.36        10.1.31
  ↑  org.apache.tomcat.embed/tomcat-embed-websocket                10.1.36        10.1.31
  ↑  org.eclipse.jetty/jetty-alpn-client                           12.0.16        12.0.14
  ↑  org.eclipse.jetty/jetty-client                                12.0.16        12.0.14
  ↑  org.eclipse.jetty/jetty-http                                  12.0.16        12.0.14
  ↑  org.eclipse.jetty/jetty-io                                    12.0.16        12.0.14
  ↑  org.eclipse.jetty/jetty-util                                  12.0.16        12.0.14
  ↑  org.objectweb.asm/asm                                         9.7.1          9.6
  ↑  org.springframework.boot/spring-boot                          3.4.3          3.3.5
  ↑  org.springframework.boot/spring-boot-actuator                 3.4.3          3.3.5
  ↑  org.springframework.boot/spring-boot-actuator-autoconfigure   3.4.3          3.3.5
  ↑  org.springframework.boot/spring-boot-autoconfigure            3.4.3          3.3.5
  ↑  org.springframework.retry/spring-retry                        2.0.11         2.0.10
  ↑  org.springframework/spring-aop                                6.2.3          6.1.14
  ↑  org.springframework/spring-beans                              6.2.3          6.1.14
  ↑  org.springframework/spring-context                            6.2.3          6.1.14
  ↑  org.springframework/spring-core                               6.2.3          6.1.14
  ↑  org.springframework/spring-expression                         6.2.3          6.1.14
  ↑  org.springframework/spring-jcl                                6.2.3          6.1.14
  ↑  org.springframework/spring-jms                                6.2.3          6.1.14
  ↑  org.springframework/spring-messaging                          6.2.3          6.1.14
  ↑  org.springframework/spring-tx                                 6.2.3          6.1.14
  ↑  org.springframework/spring-web                                6.2.3          6.1.14
  ↑  org.springframework/spring-webflux                            6.2.3          6.1.14
  ↑  org.springframework/spring-webmvc                             6.2.3          6.1.14
  ↑  spring-boot-jarmode-tools/spring-boot-jarmode-tools           3.4.3          3.3.5
  ↑  thymeleaf-spring6/thymeleaf-spring6                           3.1.3.RELEASE  3.1.2.RELEASE
  ↑  thymeleaf/thymeleaf                                           3.1.3.RELEASE  3.1.2.RELEASE

SEARCH: alfresco/alfresco-search-services

docker scout compare --only-package-type maven --only-severity critical --ignore-unchanged \
alfresco/alfresco-search-services:2.0.15 \
--to alfresco/alfresco-search-services:2.0.14

      Provenance: https://github.com/Alfresco/alfresco-docker-base-java
      Size: 380 MB (+11 MB)
      Packages: 215 (+1)
      Base image: rockylinux:9

  ## Environment Variables


      DIST_DIR=/opt/alfresco-search-services
      JAVA_HOME=/etc/alternatives/jre
      LANG=C.UTF-8
      LC_ALL=C.UTF-8
      PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
      SOLR_DATA_DIR_ROOT=/opt/alfresco-search-services/data
      SOLR_SOLR_MODEL_DIR=/opt/alfresco-search-services/data/alfrescoModels
    - SOLR_ZIP=alfresco-search-services-2.0.14.zip
    + SOLR_ZIP=alfresco-search-services-2.0.15.zip



  ## Labels


      creator=Alfresco
      maintainer=Alfresco
    - org.label-schema.build-date=2024-08-05T09:58:54Z
    + org.label-schema.build-date=2025-02-17T02:37:20Z
      org.label-schema.name=Alfresco Base Java Image
      org.label-schema.schema-version=1.0
      org.label-schema.vendor=Alfresco
    - org.opencontainers.image.created=2024-08-05T09:58:54Z
    + org.opencontainers.image.created=2025-02-17T02:37:20Z
    - org.opencontainers.image.revision=275
    + org.opencontainers.image.revision=338
      org.opencontainers.image.source=https://github.com/Alfresco/alfresco-docker-base-java
      org.opencontainers.image.title=Alfresco Base Java Image
      org.opencontainers.image.vendor=Alfresco



  ## Packages and Vulnerabilities


    +    3 packages added
    -    2 packages removed
    ⎌   14 packages changed (↑ 14 upgraded, ↓ 0 downgraded)
       191 packages unchanged




     Package                                  Version   Previous

  ↑  com.fasterxml.woodstox/woodstox-core     6.6.2     6.6.0
  +  com.sun.xml.bind.jaxb/isorelax           20090621
  +  com.sun.xml.bind/jaxb-core               4.0.3
  -  com.sun.xml.bind/jaxb-xjc                          4.0.3
  ↑  jrt-fs/jrt-fs                            17.0.14   17.0.12
  ↑  org.alfresco/alfresco-search             2.0.15    2.0.14
  ↑  org.alfresco/alfresco-solrclient-lib     2.0.15    2.0.14
  ↑  org.apache.cxf/cxf-core                  3.6.5     3.6.3
  ↑  org.apache.cxf/cxf-rt-bindings-soap      3.6.5     3.6.3
  ↑  org.apache.cxf/cxf-rt-bindings-xml       3.6.5     3.6.3
  ↑  org.apache.cxf/cxf-rt-databinding-jaxb   3.6.5     3.6.3
  ↑  org.apache.cxf/cxf-rt-frontend-jaxws     3.6.5     3.6.3
  ↑  org.apache.cxf/cxf-rt-frontend-simple    3.6.5     3.6.3
  ↑  org.apache.cxf/cxf-rt-ws-addr            3.6.5     3.6.3
  ↑  org.apache.cxf/cxf-rt-ws-policy          3.6.5     3.6.3
  ↑  org.apache.cxf/cxf-rt-wsdl               3.6.5     3.6.3
  ↑  org.apache.neethi/neethi                 3.2.1     3.2.0
  -  org.glassfish.jaxb/jaxb-core                       4.0.3
  +  org.glassfish.jaxb/jaxb-xjc              4.0.3

ACA: alfresco/alfresco-content-app

docker scout compare --only-severity critical --ignore-unchanged \
alfresco/alfresco-content-app:6.0.0 \
--to alfresco/alfresco-content-app:5.2.0

      Provenance: https://github.com/Alfresco/alfresco-content-app
      Size: 29 MB (-4.5 MB)
      Packages: 52 (+0)
      Base image: alpine:1.21-alpine


  ## Environment Variables


      BASE_PATH=/
      NGINX_ENVSUBST_OUTPUT_DIR=/etc/nginx/conf.d
      NGINX_VERSION=1.21.6
      NJS_VERSION=0.7.3
      PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
      PKG_RELEASE=1



  ## Labels


      maintainer=NGINX Docker Maintainers <docker-maint@nginx.com>

3rd Party Components installed in the docker containers

  • Rocky Linux 9.3 x64
  • OpenJDK 17.0.14.0.7-1
  • Apache Tomcat 10.1.36.0
  • Jetty 9.4.56.v20240826
  • Angular 17.1.4

Issues Addressed

We have addressed a number of bugs since the last release of Alfresco Content Services 23.4.

  • MNT 24860 Provision of the Prometheus monitoring URL
  • MNT-24841 There is no way to unlock a document without Google Docs AMP installed when using Share
  • MNT-24808 Incorrect URL for JMX Connection
  • MNT-24807 repo.Event2 is exposing user password hash and salt
  • MNT-24720 documentation regarding non admin unable to create folders rules with send email notification
  • MNT-24343 Enabling Smart Folders with Search Services v2.0
  • MNT-24091 removing cm:versionable aspect in order to be able to move to a different bucket should not be suggested
  • MNT-24756 QuickShare links stop working after upgrade to 23.3.2
  • MNT-24913 ACS Custom Workflow JavaScript error when using Java classes in a Task Listener Script
  • MNT-24838 PDF Controls are not Visible when Viewing a Document from the Search Page in Share
  • MNT-24825 Selecting 'Download PDF' within a Document Preview Names the File 'pdf.pdf'
  • MNT-24581 ACS - Folder rule cannot see that a boolean property is true and act on it
  • MNT-24571 Site Membership API fails if last name is null
  • MNT-24542 ClassCastException when calling ACS REST API from java client SDK with Keycloak token without scope

Security Issues fixed

  • CVE-2024-38827 Vulnerability in spring-security-core-6.3.4.jar
  • CVE-2025-23184 Vulnerability in cxf-core-3.4.10.jar, Vulnerability in cxf-core-4.0.5.jar
  • CVE-2024-47535  Vulnerability in netty-common-4.1.113.Final.jar
  • CVE-2024-57699 Vulnerability in json-smart-2.5.1.jar
  • CVE-2025-24970 Vulnerability in netty-handler-4.1.117.Final.jar
  • CVE-2025-25193 Vulnerability in netty-common-4.1.117.Final.jar

Known Issues

Alfresco 25.1.0 Docker Image Size Increase

With the release of Alfresco 25.1.0, you may noticed a significant increase in the size of the official Docker image. This unexpected change comes from this commit, which modified the base Tomcat image and inadvertently introduced additional layers and dependencies that increased the overall image size.

While this change does not affect the functionality of Alfresco, it can lead to longer pull times, increased storage usage, and unnecessary overhead in containerized environments.

Until this issue is resolved in a future release (tracked under OPSEXP-3172), we recommend that users build their own optimized Docker images using Alfresco Dockerfiles Bakery. This project allows for fine-grained control over the image composition, ensuring a leaner and more efficient deployment.

Alfresco is actively addressing this issue, and an optimized image is expected in the next release.

Previous Versions

Available in History of Alfresco Versions

Copyright © 2025 Khoros, LLC
li.common.scroll-to.top