This commit is contained in:
Anthony Stirling 2025-08-05 14:37:22 +01:00
parent 2c6f27a0b0
commit 9deb900de4
4 changed files with 12 additions and 9 deletions

View File

@ -55,8 +55,9 @@ RUN echo "@main https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /etc/a
openssl \ openssl \
openssl-dev \ openssl-dev \
openjdk21-jre \ openjdk21-jre \
# Security updates # Security updates - remove when Alpine base image updates these
libjxl@testing \ libjxl@community \ # CVE-2024-11403, CVE-2024-11498 - libjxl vulnerabilities
rav1e@community \ # CVE-2025-4574, GHSA-2rxc-gjrp-vjhx, RUSTSEC-2024-0404, GHSA-pg9f-39pc-qf8g - Rust crossbeam-channel/anstream via rav1e
# Doc conversion # Doc conversion
gcompat \ gcompat \
libc6-compat \ libc6-compat \
@ -75,7 +76,7 @@ RUN echo "@main https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /etc/a
python3 \ python3 \
ocrmypdf \ ocrmypdf \
py3-pip \ py3-pip \
py3-pillow@testing \ py3-pillow@community \ # CVE-2025-48379 - ensure Pillow 11.3.0+ instead of 11.2.1
py3-pdf2image@testing \ py3-pdf2image@testing \
# URW Base 35 fonts for better PDF rendering # URW Base 35 fonts for better PDF rendering
font-urw-base35 && \ font-urw-base35 && \

View File

@ -69,8 +69,9 @@ RUN echo "@main https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /etc/a
openssl \ openssl \
openssl-dev \ openssl-dev \
openjdk21-jre \ openjdk21-jre \
# Security updates # Security updates - remove when Alpine base image updates these
libjxl@testing \ libjxl@community \ # CVE-2024-11403, CVE-2024-11498 - libjxl vulnerabilities
rav1e@community \ # CVE-2025-4574, GHSA-2rxc-gjrp-vjhx, RUSTSEC-2024-0404, GHSA-pg9f-39pc-qf8g - Rust crossbeam-channel/anstream via rav1e
# Doc conversion # Doc conversion
gcompat \ gcompat \
libc6-compat \ libc6-compat \
@ -90,7 +91,7 @@ RUN echo "@main https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /etc/a
python3 \ python3 \
ocrmypdf \ ocrmypdf \
py3-pip \ py3-pip \
py3-pillow@testing \ py3-pillow@community \ # CVE-2025-48379 - ensure Pillow 11.3.0+ instead of 11.2.1
py3-pdf2image@testing && \ py3-pdf2image@testing && \
python3 -m venv /opt/venv && \ python3 -m venv /opt/venv && \
/opt/venv/bin/pip install --no-cache-dir --upgrade pip setuptools && \ /opt/venv/bin/pip install --no-cache-dir --upgrade pip setuptools && \

View File

@ -37,8 +37,9 @@ RUN echo "@testing https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /et
shadow \ shadow \
su-exec \ su-exec \
openjdk21-jre \ openjdk21-jre \
# Security updates # Security updates - remove when Alpine base image updates these
libjxl@testing && \ libjxl@community \ # CVE-2024-11403, CVE-2024-11498 - libjxl vulnerabilities
rav1e@community && \ # CVE-2025-4574, GHSA-2rxc-gjrp-vjhx, RUSTSEC-2024-0404, GHSA-pg9f-39pc-qf8g - Rust crossbeam-channel/anstream via rav1e
# User permissions # User permissions
mkdir -p /configs /logs /customFiles /usr/share/fonts/opentype/noto /tmp/stirling-pdf /pipeline/watchedFolders /pipeline/finishedFolders && \ mkdir -p /configs /logs /customFiles /usr/share/fonts/opentype/noto /tmp/stirling-pdf /pipeline/watchedFolders /pipeline/finishedFolders && \
chmod +x /scripts/*.sh && \ chmod +x /scripts/*.sh && \

View File

@ -57,7 +57,7 @@ repositories {
allprojects { allprojects {
group = 'stirling.software' group = 'stirling.software'
version = '1.1.1' version = '1.1.2'
configurations.configureEach { configurations.configureEach {
exclude group: 'commons-logging', module: 'commons-logging' exclude group: 'commons-logging', module: 'commons-logging'