diff --git a/Dockerfile b/Dockerfile index 7a2d2dde5..b60ce2fa3 100644 --- a/Dockerfile +++ b/Dockerfile @@ -55,8 +55,9 @@ RUN echo "@main https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /etc/a openssl \ openssl-dev \ openjdk21-jre \ - # Security updates - libjxl@testing \ + # Security updates - remove when Alpine base image updates these + libjxl@community \ # CVE-2024-11403, CVE-2024-11498 - libjxl vulnerabilities + rav1e@community \ # CVE-2025-4574, GHSA-2rxc-gjrp-vjhx, RUSTSEC-2024-0404, GHSA-pg9f-39pc-qf8g - Rust crossbeam-channel/anstream via rav1e # Doc conversion gcompat \ libc6-compat \ @@ -75,7 +76,7 @@ RUN echo "@main https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /etc/a python3 \ ocrmypdf \ py3-pip \ - py3-pillow@testing \ + py3-pillow@community \ # CVE-2025-48379 - ensure Pillow 11.3.0+ instead of 11.2.1 py3-pdf2image@testing \ # URW Base 35 fonts for better PDF rendering font-urw-base35 && \ diff --git a/Dockerfile.fat b/Dockerfile.fat index b1f86d92f..ab2568333 100644 --- a/Dockerfile.fat +++ b/Dockerfile.fat @@ -69,8 +69,9 @@ RUN echo "@main https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /etc/a openssl \ openssl-dev \ openjdk21-jre \ - # Security updates - libjxl@testing \ + # Security updates - remove when Alpine base image updates these + libjxl@community \ # CVE-2024-11403, CVE-2024-11498 - libjxl vulnerabilities + rav1e@community \ # CVE-2025-4574, GHSA-2rxc-gjrp-vjhx, RUSTSEC-2024-0404, GHSA-pg9f-39pc-qf8g - Rust crossbeam-channel/anstream via rav1e # Doc conversion gcompat \ libc6-compat \ @@ -90,7 +91,7 @@ RUN echo "@main https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /etc/a python3 \ ocrmypdf \ py3-pip \ - py3-pillow@testing \ + py3-pillow@community \ # CVE-2025-48379 - ensure Pillow 11.3.0+ instead of 11.2.1 py3-pdf2image@testing && \ python3 -m venv /opt/venv && \ /opt/venv/bin/pip install --no-cache-dir --upgrade pip setuptools && \ diff --git a/Dockerfile.ultra-lite b/Dockerfile.ultra-lite index f2b1107de..917b8b0c5 100644 --- a/Dockerfile.ultra-lite +++ b/Dockerfile.ultra-lite @@ -37,8 +37,9 @@ RUN echo "@testing https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /et shadow \ su-exec \ openjdk21-jre \ - # Security updates - libjxl@testing && \ + # Security updates - remove when Alpine base image updates these + libjxl@community \ # CVE-2024-11403, CVE-2024-11498 - libjxl vulnerabilities + rav1e@community && \ # CVE-2025-4574, GHSA-2rxc-gjrp-vjhx, RUSTSEC-2024-0404, GHSA-pg9f-39pc-qf8g - Rust crossbeam-channel/anstream via rav1e # User permissions mkdir -p /configs /logs /customFiles /usr/share/fonts/opentype/noto /tmp/stirling-pdf /pipeline/watchedFolders /pipeline/finishedFolders && \ chmod +x /scripts/*.sh && \ diff --git a/build.gradle b/build.gradle index 02103eed1..513725ee1 100644 --- a/build.gradle +++ b/build.gradle @@ -57,7 +57,7 @@ repositories { allprojects { group = 'stirling.software' - version = '1.1.1' + version = '1.1.2' configurations.configureEach { exclude group: 'commons-logging', module: 'commons-logging'