October 6th 2026

 

A new release of Oxalis-NG v1.5.1 is available, addressing multiple security vulnerabilities across several dependencies and Docker base images.

Release notes: https://github.com/OxalisCommunity/oxalis-ng/releases/tag/v1.5.1

Key security updates:

• WSS4J: Upgraded to 3.0.6 to address GHSA-wm7f-562f-9g52.
• Neethi: Upgraded to 3.2.3, addressing three security advisories.
• MariaDB Java Client: Upgraded to 3.5.10, addressing three security advisories.
• Logback Core and Classic: Upgraded to 1.6.3, addressing three security advisories.
• Docker base images: Updated to address security vulnerabilities:

Build: maven:3.9.9-amazoncorretto-11-alpine → maven:3.9.16-amazoncorretto-11-alpine
Runtime: amazoncorretto:11.0.25-alpine → amazoncorretto:11.0.32-alpine3.24

Recommendation: Oxalis-NG users are encouraged to review the release notes and upgrade to v1.5.1 to benefit from these security fixes.​

​