cancel
Showing results for 
Search instead for 
Did you mean: 
angelborroy
Community Manager Community Manager
Community Manager

This release contains security fixes, stability improvements and new capabilities delivered for the Alfresco Content Services 25.3 family. In addition, this release contains an updated stack of supported databases, operating systems and platforms providing up to date support.

Installation

Alfresco Community Edition 25.3 is available as a distribution zip file for manual installation, or it can be installed using an Ansible playbook (Linux only) for non-containerized environments. It is also available as a set of Docker images that can be deployed in containerized environments using docker-compose or Helm charts (for Kubernetes).

You can find a summary of these options here:

https://support.hyland.com/r/Alfresco/Alfresco-Content-Services-Community-Edition/25.3/Alfresco-Cont...

ZIP Distribution files

Ansible

Deployment resources available in Alfresco/alfresco-ansible-deployment (https://github.com/Alfresco/alfresco-ansible-deployment)

Docker Compose

Reference Docker Compose template is available in community-docker-compose.yml

Additional Docker Compose deployment methods:

Kubernetes

Helm charts are available in https://github.com/Alfresco/alfresco-helm-charts

Upgrading from previous releases

Care should be taken when upgrading from any previous releases of Alfresco Community Edition. There are some steps that should be reviewed and planned before you upgrade. Please take the time to familiarize yourself with the guidance below and plan your upgrade.

Please refer to the detailed Upgrading documentation, including Alfresco Content Services upgrade paths.

In particular, please ensure that the following steps are completed before you start your upgrade process:

  • Ensure that you have a functional backup of your Alfresco Repository and your Alfresco Database, before starting the upgrade process
  • Download and run the Alfresco Extension Inspector to understand, which customization or library items need to be reviewed or updated prior to starting
  • Review all new and deprecated features included in this release note
  • Review and implement the new supported stack options and the minimum versions of modules/extensions required, and update as necessary for the new deployment
  • Apply the recommended database optimization patch for larger implementations (see upgrade documentation for details)

Specific Release Components

Alfresco Mobile

The latest release of Alfresco Mobile Workspace is 1.12.0 and is compatible with Alfresco Content Services 25.3

SDK

The latest release of the Alfresco in-process SDK is SDK 4.12.0, which is compatible with Alfresco Content Services 25.3.
The latest release of the Alfresco out-of-process Event SDK is SDK 7.1.0, which is compatible with Alfresco Content Services 25.3.

Documentation

The documentation has been refreshed for this release: https://support.hyland.com/p/alfresco

Localization

The Content Repository supports the following languages: French, German, Italian, Spanish, Japanese, Dutch, Norwegian (Bokmål), Russian, Brazilian Portuguese, Polish, Czech, Danish, Swedish, Finnish and Simplified Chinese.

Share supports the following languages: French, German, Italian, Spanish, Japanese, Dutch, Norwegian (Bokmål), Russian, Brazilian Portuguese and Simplified Chinese.

Alfresco Content Application supports the following languages: French, German, Italian, Spanish, Japanese, Dutch, Norwegian (Bokmål), Russian, Brazilian Portuguese, Polish, Czech, Danish, Swedish, Finnish and Simplified Chinese.

Contents

Images are available on Docker Hub

Following Docker Images are available in both AMD64 and ARCH64 architectures:

The source code for the packaging project that is used to create and run Docker images and build the distribution zip can be found here (https://github.com/Alfresco/acs-community-packaging/releases/tag/25.3.0).

REPOSITORY: alfresco-content-repository-community

      Provenance: https://github.com/Alfresco/alfresco-docker-base-tomcat
      Size: 921 MB (+3 MB)
      Packages: 385 (+0)

  ## Environment Variables

      APR_LIBDIR=/usr/local/tomcat/apr
      CATALINA_HOME=/usr/local/tomcat
      JAVA_HOME=/etc/alternatives/jre
      LANG=C.UTF-8
      LC_ALL=C.UTF-8
      LD_LIBRARY_PATH=/usr/local/tomcat/native-jni-lib:/usr/local/tomcat/apr
      PATH=/usr/local/tomcat/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
      TOMCAT_NATIVE_LIBDIR=/usr/local/tomcat/native-jni-lib

  ## Labels

      org.label-schema.build-date=2025-07-14T10:18:17Z
      org.label-schema.description=Apache Tomcat Image tailored for Alfresco products
      org.label-schema.name=Alfresco Base Tomcat Image
      org.label-schema.schema-version=1.0
      org.label-schema.url=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.label-schema.vcs-ref=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.label-schema.vcs-url=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.label-schema.vendor=Hyland
      org.opencontainers.image.authors=Alfresco OPS-Readiness
      org.opencontainers.image.created=2025-07-14T10:18:17Z
      org.opencontainers.image.description=Apache Tomcat Image tailored for Alfresco products
      org.opencontainers.image.revision=584
      org.opencontainers.image.source=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.opencontainers.image.title=Alfresco Base Tomcat Image
      org.opencontainers.image.url=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.opencontainers.image.vendor=Hyland

  ## Packages and Vulnerabilities

    +   3 packages added
    -   3 packages removed
    ⎌ 165 packages changed (↑ 165 upgraded, ↓ 0 downgraded)
      217 packages unchanged

     Package                                                              Version        Previous

  ↑  com.fasterxml.woodstox/woodstox-core                                   7.1.1          7.0.0
  ↑  com.github.albfernandez/juniversalchardet                              2.5.0          2.4.0
  ↑  com.google.code.gson/gson                                              2.13.1         2.12.1
  ↑  com.google.errorprone/error_prone_annotations                          2.38.0         2.36.0
  ↑  com.healthmarketscience.jackcess/jackcess                              4.0.8          4.0.5
  ↑  com.healthmarketscience.jackcess/jackcess-encrypt                      4.0.3          4.0.2
  ↑  com.nimbusds/nimbus-jose-jwt                                           9.37.4         9.37.3
  ↑  com.sun.mail/jakarta.mail                                              2.0.2          2.0.1
  ↑  commons-io/commons-io                                                  2.20.0         2.18.0
  ↑  commons-logging/commons-logging                                        1.3.5          1.3.3
  ↑  commons-validator/commons-validator                                    1.10.0         1.9.0
  ↑  io.micrometer/micrometer-commons                                       1.14.11        1.14.3
  ↑  io.micrometer/micrometer-observation                                   1.14.11        1.14.3
  ↑  io.netty/netty-buffer                                                  4.1.127.Final  4.1.118.Final
  ↑  io.netty/netty-codec                                                   4.1.127.Final  4.1.118.Final
  ↑  io.netty/netty-codec-http                                              4.1.127.Final  4.1.118.Final
  ↑  io.netty/netty-codec-socks                                             4.1.127.Final  4.1.118.Final
  ↑  io.netty/netty-common                                                  4.1.127.Final  4.1.118.Final
  ↑  io.netty/netty-handler                                                 4.1.127.Final  4.1.118.Final
  ↑  io.netty/netty-handler-proxy                                           4.1.127.Final  4.1.118.Final
  ↑  io.netty/netty-resolver                                                4.1.127.Final  4.1.118.Final
  ↑  io.netty/netty-tcnative-classes                                        2.0.73.Final   2.0.70.Final
  ↑  io.netty/netty-transport                                               4.1.127.Final  4.1.118.Final
  ↑  io.netty/netty-transport-classes-epoll                                 4.1.127.Final  4.1.118.Final
  ↑  io.netty/netty-transport-classes-kqueue                                4.1.127.Final  4.1.118.Final
  ↑  io.netty/netty-transport-native-epoll                                  4.1.127.Final  4.1.118.Final
  ↑  io.netty/netty-transport-native-kqueue                                 4.1.127.Final  4.1.118.Final
  ↑  io.netty/netty-transport-native-unix-common                            4.1.127.Final  4.1.118.Final
  ↑  joda-time/joda-time                                                    2.14.0         2.13.1
  ↑  org.alfresco.aos-module/alfresco-aos-module                            3.4.0          3.3.0
  ↑  org.alfresco.aos-module/alfresco-aos-repo-binding                      3.4.0          3.3.0
  ↑  org.alfresco.aos-module/alfresco-vti-bin                               3.4.0          3.3.0
  ↑  org.alfresco.officeservices/aoservices                                 4.0.11         4.0.11-A1
  ↑  org.alfresco.officeservices/docproc                                    4.0.11         4.0.11-A1
  ↑  org.alfresco/acs-event-model                                           1.0.11         1.0.2
  ↑  org.alfresco/alfresco-core                                             25.3.0.81      25.2.0.64
  ↑  org.alfresco/alfresco-data-model                                       25.3.0.81      25.2.0.64
  ↑  org.alfresco/alfresco-mmt                                              25.3.0.81      25.2.0.64
  ↑  org.alfresco/alfresco-remote-api                                       25.3.0.81      25.2.0.64
  ↑  org.alfresco/alfresco-share-services                                   25.3.0.81      25.2.0.64
  ↑  org.alfresco/alfresco-transform-model                                  5.2.4          5.2.0
  ↑  org.apache.camel/camel-activemq                                        4.15.0         4.11.0
  ↑  org.apache.camel/camel-amqp                                            4.15.0         4.11.0
  ↑  org.apache.camel/camel-api                                             4.15.0         4.11.0
  ↑  org.apache.camel/camel-base                                            4.15.0         4.11.0
  ↑  org.apache.camel/camel-base-engine                                     4.15.0         4.11.0
  ↑  org.apache.camel/camel-bean                                            4.15.0         4.11.0
  ↑  org.apache.camel/camel-browse                                          4.15.0         4.11.0
  ↑  org.apache.camel/camel-cluster                                         4.15.0         4.11.0
  ↑  org.apache.camel/camel-controlbus                                      4.15.0         4.11.0
  ↑  org.apache.camel/camel-core                                            4.15.0         4.11.0
  ↑  org.apache.camel/camel-core-catalog                                    4.15.0         4.11.0
  ↑  org.apache.camel/camel-core-engine                                     4.15.0         4.11.0
  ↑  org.apache.camel/camel-core-languages                                  4.15.0         4.11.0
  ↑  org.apache.camel/camel-core-model                                      4.15.0         4.11.0
  ↑  org.apache.camel/camel-core-processor                                  4.15.0         4.11.0
  ↑  org.apache.camel/camel-core-reifier                                    4.15.0         4.11.0
  ↑  org.apache.camel/camel-core-xml                                        4.15.0         4.11.0
  ↑  org.apache.camel/camel-dataformat                                      4.15.0         4.11.0
  ↑  org.apache.camel/camel-dataset                                         4.15.0         4.11.0
  ↑  org.apache.camel/camel-direct                                          4.15.0         4.11.0
  ↑  org.apache.camel/camel-file                                            4.15.0         4.11.0
  ↑  org.apache.camel/camel-health                                          4.15.0         4.11.0
  ↑  org.apache.camel/camel-jackson                                         4.15.0         4.11.0
  ↑  org.apache.camel/camel-jms                                             4.15.0         4.11.0
  ↑  org.apache.camel/camel-language                                        4.15.0         4.11.0
  ↑  org.apache.camel/camel-log                                             4.15.0         4.11.0
  ↑  org.apache.camel/camel-management                                      4.15.0         4.11.0
  ↑  org.apache.camel/camel-management-api                                  4.15.0         4.11.0
  ↑  org.apache.camel/camel-mock                                            4.15.0         4.11.0
  ↑  org.apache.camel/camel-ref                                             4.15.0         4.11.0
  ↑  org.apache.camel/camel-rest                                            4.15.0         4.11.0
  ↑  org.apache.camel/camel-saga                                            4.15.0         4.11.0
  ↑  org.apache.camel/camel-scheduler                                       4.15.0         4.11.0
  ↑  org.apache.camel/camel-seda                                            4.15.0         4.11.0
  ↑  org.apache.camel/camel-spring                                          4.15.0         4.11.0
  ↑  org.apache.camel/camel-spring-xml                                      4.15.0         4.11.0
  ↑  org.apache.camel/camel-stub                                            4.15.0         4.11.0
  ↑  org.apache.camel/camel-support                                         4.15.0         4.11.0
  ↑  org.apache.camel/camel-timer                                           4.15.0         4.11.0
  ↑  org.apache.camel/camel-tooling-model                                   4.15.0         4.11.0
  ↑  org.apache.camel/camel-util                                            4.15.0         4.11.0
  ↑  org.apache.camel/camel-util-json                                       4.15.0         4.11.0
  ↑  org.apache.camel/camel-validator                                       4.15.0         4.11.0
  ↑  org.apache.camel/camel-xml-io                                          4.15.0         4.11.0
  ↑  org.apache.camel/camel-xml-io-util                                     4.15.0         4.11.0
  ↑  org.apache.camel/camel-xml-jaxb                                        4.15.0         4.11.0
  ↑  org.apache.camel/camel-xml-jaxp                                        4.15.0         4.11.0
  ↑  org.apache.camel/camel-xml-jaxp-util                                   4.15.0         4.11.0
  ↑  org.apache.camel/camel-xpath                                           4.15.0         4.11.0
  ↑  org.apache.camel/camel-xslt                                            4.15.0         4.11.0
  ↑  org.apache.camel/camel-yaml-io                                         4.15.0         4.11.0
  ↑  org.apache.commons/commons-exec                                        1.5.0          1.4.0
  ↑  org.apache.commons/commons-lang3                                       3.18.0         3.17.0
  ↑  org.apache.cxf/cxf-core                                                4.1.2          4.1.0
  ↑  org.apache.cxf/cxf-rt-bindings-soap                                    4.1.2          4.1.0
  ↑  org.apache.cxf/cxf-rt-bindings-xml                                     4.1.2          4.1.0
  ↑  org.apache.cxf/cxf-rt-databinding-jaxb                                 4.1.2          4.1.0
  ↑  org.apache.cxf/cxf-rt-frontend-jaxws                                   4.1.2          4.1.0
  ↑  org.apache.cxf/cxf-rt-frontend-simple                                  4.1.2          4.1.0
  ↑  org.apache.cxf/cxf-rt-transports-http                                  4.1.2          4.1.0
  ↑  org.apache.cxf/cxf-rt-ws-addr                                          4.1.2          4.1.0
  ↑  org.apache.cxf/cxf-rt-ws-policy                                        4.1.2          4.1.0
  ↑  org.apache.cxf/cxf-rt-wsdl                                             4.1.2          4.1.0
  ↑  org.apache.james/apache-mime4j-core                                    0.8.13         0.8.11
  ↑  org.apache.james/apache-mime4j-dom                                     0.8.13         0.8.11
  ↑  org.apache.logging.log4j/log4j-api                                     2.25.1         2.24.3
  ↑  org.apache.logging.log4j/log4j-core                                    2.25.1         2.24.3
  ↑  org.apache.logging.log4j/log4j-slf4j2-impl                             2.25.1         2.24.3
  ↑  org.apache.pdfbox/fontbox                                              3.0.5          2.0.31
  ↑  org.apache.pdfbox/xmpbox                                               3.0.5          2.0.31
  ↑  org.apache.qpid/qpid-jms-client                                        2.9.0          2.7.0
  ↑  org.apache.santuario/xmlsec                                            4.0.4          4.0.3
  ↑  org.apache.tika/tika-core                                              3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-apple-module                               3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-audiovideo-module                          3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-cad-module                                 3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-code-module                                3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-crypto-module                              3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-digest-commons                             3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-font-module                                3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-html-module                                3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-image-module                               3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-mail-commons                               3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-mail-module                                3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-microsoft-module                           3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-miscoffice-module                          3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-news-module                                3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-ocr-module                                 3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-pdf-module                                 3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-pkg-module                                 3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-text-module                                3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-webarchive-module                          3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-xml-module                                 3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-xmp-commons                                3.2.3          2.9.2
  ↑  org.apache.tika/tika-parser-zip-commons                                3.2.3          2.9.2
  ↑  org.apache.tika/tika-parsers-standard-package                          3.2.3          2.9.2
  ↑  org.bouncycastle/bcpkix-jdk18on                                        1.81           1.79
  ↑  org.bouncycastle/bcprov-jdk18on                                        1.81           1.79
  ↑  org.bouncycastle/bcutil-jdk18on                                        1.81           1.79
  ↑  org.json/json                                                          20250517       20240303
  ↑  org.mybatis/mybatis-spring                                             3.0.5          3.0.4
  ↑  org.netpreserve/jwarc                                                  0.32.0         0.29.0
  ↑  org.objectweb.asm/asm                                                  9.8            9.7.1
  ↑  org.slf4j/jcl-over-slf4j                                               2.0.17         2.0.10
  ↑  org.springframework.security/spring-security-core                      6.4.11         6.3.9
  ↑  org.springframework.security/spring-security-crypto                    6.4.11         6.3.9
  ↑  org.springframework.security/spring-security-oauth2-client             6.4.11         6.3.9
  ↑  org.springframework.security/spring-security-oauth2-core               6.4.11         6.3.9
  ↑  org.springframework.security/spring-security-oauth2-jose               6.4.11         6.3.9
  ↑  org.springframework.security/spring-security-oauth2-resource-server    6.4.11         6.3.9
  ↑  org.springframework.security/spring-security-web                       6.4.11         6.3.9
  ↑  org.springframework/spring-aop                                         6.2.11         6.2.2
  ↑  org.springframework/spring-beans                                       6.2.11         6.2.2
  ↑  org.springframework/spring-context                                     6.2.11         6.2.2
  ↑  org.springframework/spring-context-support                             6.2.11         6.2.2
  ↑  org.springframework/spring-core                                        6.2.11         6.2.2
  ↑  org.springframework/spring-expression                                  6.2.11         6.2.2
  ↑  org.springframework/spring-jdbc                                        6.2.11         6.2.2
  ↑  org.springframework/spring-jms                                         6.2.11         6.2.2
  ↑  org.springframework/spring-messaging                                   6.2.11         6.2.2
  ↑  org.springframework/spring-orm                                         6.2.11         6.2.2
  ↑  org.springframework/spring-tx                                          6.2.11         6.2.2
  ↑  org.springframework/spring-web                                         6.2.11         6.2.2
  ↑  org.springframework/spring-webmvc                                      6.2.11         6.2.2
  +  org.apache.pdfbox/pdfbox-io                                            3.0.5
  +  org.bouncycastle/bcjmail-jdk18on                                       1.81
  +  org.jsoup/jsoup                                                        1.21.1
  -  commons-lang/commons-lang                                              2.6
  -  org.bouncycastle/bcmail-jdk18on                                        1.79
  -  org.ccil.cowan.tagsoup.CommandLine/tagsoup                             1.2.1

SHARE: alfresco-share

      Provenance: https://github.com/Alfresco/alfresco-docker-base-tomcat
      Size: 654 MB (+3 MB)
      Packages: 199 (-8)

  ## Environment Variables

      APR_LIBDIR=/usr/local/tomcat/apr
      CATALINA_HOME=/usr/local/tomcat
      JAVA_HOME=/etc/alternatives/jre
      LANG=C.UTF-8
      LC_ALL=C.UTF-8
      LD_LIBRARY_PATH=/usr/local/tomcat/native-jni-lib:/usr/local/tomcat/apr
      PATH=/usr/local/tomcat/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
      TOMCAT_NATIVE_LIBDIR=/usr/local/tomcat/native-jni-lib

  ## Labels

      org.label-schema.build-date=2025-07-14T10:18:17Z
      org.label-schema.description=Apache Tomcat Image tailored for Alfresco products
      org.label-schema.name=Alfresco Base Tomcat Image
      org.label-schema.schema-version=1.0
      org.label-schema.url=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.label-schema.vcs-ref=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.label-schema.vcs-url=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.label-schema.vendor=Hyland
      org.opencontainers.image.authors=Alfresco OPS-Readiness
      org.opencontainers.image.created=2025-07-14T10:18:17Z
      org.opencontainers.image.description=Apache Tomcat Image tailored for Alfresco products
      org.opencontainers.image.revision=584
      org.opencontainers.image.source=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.opencontainers.image.title=Alfresco Base Tomcat Image
      org.opencontainers.image.url=https://github.com/Alfresco/alfresco-docker-base-tomcat
      org.opencontainers.image.vendor=Hyland
      quay.expires-after=NEVER

  ## Packages and Vulnerabilities

    +   0 packages added
    -   8 packages removed
    ⎌  44 packages changed (↑ 44 upgraded, ↓ 0 downgraded)
      155 packages unchanged

     Package                                                              Version        Previous

  ↑  com.google.code.gson/gson                                              2.12.1         2.10.1
  ↑  com.nimbusds/nimbus-jose-jwt                                           10.0.2         9.37.3
  ↑  commons-io/commons-io                                                  2.20.0         2.18.0
  ↑  commons-logging/commons-logging                                        1.3.5          1.3.3
  ↑  io.micrometer/micrometer-commons                                       1.14.12        1.14.8
  ↑  io.micrometer/micrometer-observation                                   1.14.12        1.14.8
  ↑  joda-time/joda-time                                                    2.14.0         2.13.1
  ↑  org.alfresco.encryptor.ShareStringEncryption/alfresco-share-encryption 25.3.0.56      25.2.0.46
  ↑  org.alfresco.surf/spring-cmis-framework                                10.1           10.0
  ↑  org.alfresco.surf/spring-surf                                          10.1           10.0
  ↑  org.alfresco.surf/spring-surf-api                                      10.1           10.0
  ↑  org.alfresco/aikau                                                     1.1.4          1.1.3
  ↑  org.alfresco/alfresco-core                                             25.3.0.81      25.2.0.64
  ↑  org.alfresco/alfresco-mmt                                              25.3.0.81      25.2.0.64
  ↑  org.alfresco/alfresco-web-framework-commons                            25.3.0.56      25.2.0.46
  ↑  org.apache.commons/commons-lang3                                       3.18.0         3.4
  ↑  org.apache.cxf/cxf-core                                                4.1.1          4.1.0
  ↑  org.apache.cxf/cxf-rt-bindings-soap                                    4.1.1          4.1.0
  ↑  org.apache.cxf/cxf-rt-bindings-xml                                     4.1.1          4.1.0
  ↑  org.apache.cxf/cxf-rt-databinding-jaxb                                 4.1.1          4.1.0
  ↑  org.apache.cxf/cxf-rt-frontend-jaxws                                   4.1.1          4.1.0
  ↑  org.apache.cxf/cxf-rt-frontend-simple                                  4.1.1          4.1.0
  ↑  org.apache.cxf/cxf-rt-transports-http                                  4.1.1          4.1.0
  ↑  org.apache.cxf/cxf-rt-ws-addr                                          4.1.1          4.1.0
  ↑  org.apache.cxf/cxf-rt-ws-policy                                        4.1.1          4.1.0
  ↑  org.apache.cxf/cxf-rt-wsdl                                             4.1.1          4.1.0
  ↑  org.springframework.security/spring-security-core                      6.5.6          6.4.4
  ↑  org.springframework.security/spring-security-crypto                    6.5.6          6.4.4
  ↑  org.springframework.security/spring-security-oauth2-client             6.5.6          6.4.4
  ↑  org.springframework.security/spring-security-oauth2-core               6.5.6          6.4.4
  ↑  org.springframework.security/spring-security-oauth2-jose               6.5.6          6.4.4
  ↑  org.springframework.security/spring-security-web                       6.5.6          6.4.4
  ↑  org.springframework/spring-aop                                         6.2.11         6.2.2
  ↑  org.springframework/spring-beans                                       6.2.12         6.2.8
  ↑  org.springframework/spring-context                                     6.2.11         6.2.2
  ↑  org.springframework/spring-core                                        6.2.12         6.2.8
  ↑  org.springframework/spring-expression                                  6.2.11         6.2.2
  ↑  org.springframework/spring-jcl                                         6.2.12         6.2.8
  ↑  org.springframework/spring-jdbc                                        6.2.11         6.2.2
  ↑  org.springframework/spring-orm                                         6.2.11         6.2.2
  ↑  org.springframework/spring-test                                        6.2.12         6.2.8
  ↑  org.springframework/spring-tx                                          6.2.11         6.2.2
  ↑  org.springframework/spring-web                                         6.2.12         6.2.8
  ↑  org.springframework/spring-webmvc                                      6.2.12         6.2.8
  -  jakarta.jws/jakarta.jws-api                                            3.0.0
  -  jakarta.mail/jakarta.mail-api                                          2.1.3
  -  org.eclipse.angus/angus-core                                           2.0.3
  -  org.eclipse.angus/angus-mail                                           2.0.3
  -  org.eclipse.angus/imap                                                 2.0.3
  -  org.eclipse.angus/logging-mailhandler                                  2.0.3
  -  org.eclipse.angus/pop3                                                 2.0.3
  -  org.eclipse.angus/smtp                                                 2.0.3

TRANSFORM: alfresco/alfresco-transform-core-aio

      Provenance: https://github.com/Alfresco/alfresco-docker-base-java
      Size: 1800 MB (-4 MB)
      Packages: 38 (+0)

  ## Environment Variables

      ALFRESCO_PDF_RENDERER_ARM64_LIB_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repositories/releases/org/alfresco/alfresco-pdf-renderer/1.2/alfresco-pdf-renderer-1.2-linux-arm.tgz
      ALFRESCO_PDF_RENDERER_LIB_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repositories/releases/org/alfresco/alfresco-pdf-renderer/1.2/alfresco-pdf-renderer-1.2-linux.tgz
      IMAGEMAGICK_DEP_RPM_URL=https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
      IMAGEMAGICK_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repositories/thirdparty/org/imagemagick/imagemagick-distribution/7.1.0-16-ci-10/imagemagick-distribution-7.1.0-16-ci-10
      JAVA_HOME=/etc/alternatives/jre
      JAVA_OPTS=
      LANG=C.UTF-8
      LC_ALL=C.UTF-8
      LIBREOFFICE_ARM64_RPM_URL=https://dl.rockylinux.org/pub/rocky/9/devel/aarch64/os/Packages/l/
      LIBREOFFICE_ARM64_RPM_VERSION=libreoffice-7.1.8.1
      LIBREOFFICE_RPM_URL=https://nexus.alfresco.com/nexus/service/local/repositories/thirdparty/org/libreoffice/libreoffice-dist/7.2.5/libreoffice-dist-7.2.5-linux.gz
      PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

  ## Labels

      org.label-schema.build-date=2025-02-17T02:37:20Z
      org.label-schema.name=Alfresco Base Java Image
      org.label-schema.schema-version=1.0
      org.label-schema.vendor=Alfresco
      org.opencontainers.image.created=2025-02-17T02:37:20Z
      org.opencontainers.image.revision=338
      org.opencontainers.image.source=https://github.com/Alfresco/alfresco-docker-base-java
      org.opencontainers.image.title=Alfresco Base Java Image
      org.opencontainers.image.vendor=Alfresco

  ## Packages and Vulnerabilities

    +   0 packages added
    -   0 packages removed
    ⎌   0 packages changed (↑ 0 upgraded, ↓ 0 downgraded)
       38 packages unchanged

SEARCH: alfresco/alfresco-search-services

      Provenance: https://github.com/Alfresco/alfresco-docker-base-java
      Size: 711 MB (+0 MB)
      Packages: 206 (-1)

  ## Environment Variables

    + SOLR_ZIP=alfresco-search-services-2.0.17.zip
    - SOLR_ZIP=alfresco-search-services-2.0.16.zip

      DIST_DIR=/opt/alfresco-search-services
      JAVA_HOME=/etc/alternatives/jre
      LANG=C.UTF-8
      LC_ALL=C.UTF-8
      PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
      SOLR_DATA_DIR_ROOT=/opt/alfresco-search-services/data
      SOLR_SOLR_MODEL_DIR=/opt/alfresco-search-services/data/alfrescoModels

  ## Labels

      creator=Alfresco
      maintainer=Alfresco
      org.label-schema.build-date=2025-05-19T02:50:27Z
      org.label-schema.name=Alfresco Base Java Image
      org.label-schema.schema-version=1.0
      org.label-schema.vendor=Alfresco
      org.opencontainers.image.created=2025-05-19T02:50:27Z
      org.opencontainers.image.revision=356
      org.opencontainers.image.source=https://github.com/Alfresco/alfresco-docker-base-java
      org.opencontainers.image.title=Alfresco Base Java Image
      org.opencontainers.image.vendor=Alfresco

  ## Packages and Vulnerabilities

    +   0 packages added
    -   1 packages removed
    ⎌  39 packages changed (↑ 39 upgraded, ↓ 0 downgraded)
      167 packages unchanged

     Package                                                              Version        Previous

  ↑  org.alfresco/alfresco-search                                           2.0.17         2.0.16
  ↑  org.alfresco/alfresco-solrclient-lib                                   2.0.17         2.0.16
  ↑  org.apache.commons/commons-lang3                                       3.18.0         3.12.0
  ↑  org.apache.cxf/cxf-core                                                3.6.6          3.6.5
  ↑  org.apache.cxf/cxf-rt-bindings-soap                                    3.6.6          3.6.5
  ↑  org.apache.cxf/cxf-rt-bindings-xml                                     3.6.6          3.6.5
  ↑  org.apache.cxf/cxf-rt-databinding-jaxb                                 3.6.6          3.6.5
  ↑  org.apache.cxf/cxf-rt-frontend-jaxws                                   3.6.6          3.6.5
  ↑  org.apache.cxf/cxf-rt-frontend-simple                                  3.6.6          3.6.5
  ↑  org.apache.cxf/cxf-rt-ws-addr                                          3.6.6          3.6.5
  ↑  org.apache.cxf/cxf-rt-ws-policy                                        3.6.6          3.6.5
  ↑  org.apache.cxf/cxf-rt-wsdl                                             3.6.6          3.6.5
  ↑  org.apache.lucene/lucene-analyzers-common                              6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-analyzers-icu                                 6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-analyzers-kuromoji                            6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-analyzers-morfologik                          6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-analyzers-phonetic                            6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-analyzers-smartcn                             6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-analyzers-stempel                             6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-backward-codecs                               6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-classification                                6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-codecs                                        6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-core                                          6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-expressions                                   6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-grouping                                      6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-highlighter                                   6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-join                                          6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-memory                                        6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-misc                                          6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-queries                                       6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-queryparser                                   6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-sandbox                                       6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-spatial-extras                                6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.lucene/lucene-suggest                                       6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.solr/solr-analysis-extras                                   6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.solr/solr-clustering                                        6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.solr/solr-core                                              6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.solr/solr-langid                                            6.6.5-patched.22 6.6.5-patched.21
  ↑  org.apache.solr/solr-solrj                                             6.6.5-patched.22 6.6.5-patched.21
  -  commons-lang/commons-lang                                              2.6


3rd Party Components installed in the docker containers

  • Rocky Linux 9.3
  • OpenJDK 17.0.15
  • Apache Tomcat 10.1.43.0
  • Jetty 9.4.57.v20241219
  • Angular 19.2.6

Issues Addressed

We have addressed a number of bugs since the last release of Alfresco Content Services 25.2, including fixes in repository, search, indexing and UI components.

  • MNT-25422 – Corrected behaviour of bulleted and numbered lists and underline formatting when adding comments in files.
  • MNT-25393 – AGS REST API POST retention-schedule now accepts the rma:dateFiled property as expected.
  • MNT-25303 – Restored consistent behaviour for legacy Slingshot URLs between ACS 23.2 and ACS 25.x.
  • MNT-25278 – Made creation of IPRW groups for repository-native objects filed as records thread-safe.
  • MNT-25267 – Fixed search failures caused by “entity content is too long for the configured buffer limit”.
  • MNT-25250 – Ensured Extract Metadata is applied when content is updated.
  • MNT-25242 – Corrected JavaScript context handling that had been affected by MNT-23158.
  • MNT-25234 – Clarified and fixed behaviour for system.thumbnail.generate=true in relation to content indexing.
  • MNT-25232 – Improved performance when loading security-group constraints for folder rules on large repositories.
  • MNT-25231 – Fixed Site Notice dashlet link editor so text colour changes are preserved after saving.
  • MNT-25201 – Ensured cm:isContentIndexed = false works correctly when used in folder rules.
  • MNT-25150 – Aligned ownership permission checks when using both transactional and eventual consistency search.
  • MNT-25145 – Resolved timeouts when loading rules configuration due to action constraints.
  • MNT-24975 – Prevented creation of duplicate IPRW (write) groups when filing documents as records.
  • MNT-24530 – Fixed RSS subscription behaviour so that browser authentication prompts appear correctly on ACS 23.x and above.
  • MNT-24308 – Corrected visual behaviour of “My Favorites” in the Document Library so favorites links are not shown as disabled.

Security Issues fixed

  • CVE-2025-54988 – Addressed vulnerability in Apache Tika core used by the platform.
  • CVE-2025-48913 – Hardened JMS configuration to avoid potential code execution via untrusted RMI or LDAP endpoints in Apache CXF.
  • CVE-2025-7962 – Resolved SMTP injection issue related to line break handling in Jakarta Mail.
  • CVE-2025-41242 – Fixed issue in spring-webmvc-6.2.8.jar used by ACS components.
  • CVE-2025-48989 – Updated tomcat-embed-core 9.0.60 used by APS 2.x.
  • CVE-2025-48924 – Updated commons-lang3-3.12.0.jar used by APS 2.x.
  • CVE-2025-53864 – Addressed vulnerability in nimbus-jose-jwt-9.37.3.jar used in ACS external services.
  • CVE-2025-55754 – Fixed issue in tomcat-juli-10.1.41.jar used by ATS.
  • CVE-2025-55752 – Fixed issue in tomcat-embed-core-10.1.44.jar used by ATS.

Known Issues

None

Previous Versions

Available in History of Alfresco Versions