From 6778d4a8459f3184aba6c57af08a116b096acecd Mon Sep 17 00:00:00 2001
From: Bitnami Bot <bitnami.bot@broadcom.com>
Date: Fri, 5 Jun 2026 21:40:07 +0200
Subject: [PATCH] [bitnami/ghost] Release 6.44.1-debian-12-r0 (#94403)

Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>
---
 bitnami/ghost/6/debian-12/Dockerfile          | 10 +++---
 ...43.1-0-linux-amd64-debian-12.tar.gz.sha256 |  1 -
 ...43.1-0-linux-arm64-debian-12.tar.gz.sha256 |  1 -
 ...44.1-0-linux-amd64-debian-12.tar.gz.sha256 |  1 +
 ...44.1-0-linux-arm64-debian-12.tar.gz.sha256 |  1 +
 ....13-11-linux-amd64-debian-12.tar.gz.sha256 |  1 -
 ....13-11-linux-arm64-debian-12.tar.gz.sha256 |  1 -
 ....13-12-linux-amd64-debian-12.tar.gz.sha256 |  1 +
 ....13-12-linux-arm64-debian-12.tar.gz.sha256 |  1 +
 .../prebuildfs/opt/bitnami/scripts/libos.sh   |  2 +-
 .../opt/bitnami/scripts/libvalidations.sh     |  2 +-
 .../opt/bitnami/scripts/libversion.sh         | 33 +++++++++++++++++++
 .../rootfs/opt/bitnami/scripts/libghost.sh    |  8 ++++-
 .../opt/bitnami/scripts/libmysqlclient.sh     | 27 ++++++++-------
 14 files changed, 64 insertions(+), 26 deletions(-)
 delete mode 100644 bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.43.1-0-linux-amd64-debian-12.tar.gz.sha256
 delete mode 100644 bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.43.1-0-linux-arm64-debian-12.tar.gz.sha256
 create mode 100644 bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.44.1-0-linux-amd64-debian-12.tar.gz.sha256
 create mode 100644 bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.44.1-0-linux-arm64-debian-12.tar.gz.sha256
 delete mode 100644 bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-11-linux-amd64-debian-12.tar.gz.sha256
 delete mode 100644 bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-11-linux-arm64-debian-12.tar.gz.sha256
 create mode 100644 bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-12-linux-amd64-debian-12.tar.gz.sha256
 create mode 100644 bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-12-linux-arm64-debian-12.tar.gz.sha256

diff --git a/bitnami/ghost/6/debian-12/Dockerfile b/bitnami/ghost/6/debian-12/Dockerfile
index eca29255dc7a..ef7d76677b3c 100644
--- a/bitnami/ghost/6/debian-12/Dockerfile
+++ b/bitnami/ghost/6/debian-12/Dockerfile
@@ -7,13 +7,13 @@ ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith"
 ARG TARGETARCH
 
 LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2026-06-02T06:21:36Z" \
+      org.opencontainers.image.created="2026-06-05T18:59:16Z" \
       org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
       org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/ghost/README.md" \
       org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/ghost" \
       org.opencontainers.image.title="ghost" \
       org.opencontainers.image.vendor="Broadcom, Inc." \
-      org.opencontainers.image.version="6.43.1"
+      org.opencontainers.image.version="6.44.1"
 
 ENV HOME="/" \
     OS_ARCH="${TARGETARCH:-amd64}" \
@@ -29,10 +29,10 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
     mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
     COMPONENTS=( \
       "nss-wrapper-1.1.16-0-linux-${OS_ARCH}-debian-12" \
-      "python-3.12.13-11-linux-${OS_ARCH}-debian-12" \
+      "python-3.12.13-12-linux-${OS_ARCH}-debian-12" \
       "node-22.22.3-0-linux-${OS_ARCH}-debian-12" \
       "mysql-client-12.3.2-0-linux-${OS_ARCH}-debian-12" \
-      "ghost-6.43.1-0-linux-${OS_ARCH}-debian-12" \
+      "ghost-6.44.1-0-linux-${OS_ARCH}-debian-12" \
     ) ; \
     for COMPONENT in "${COMPONENTS[@]}"; do \
       if [ ! -f "${COMPONENT}.tar.gz" ]; then \
@@ -51,7 +51,7 @@ RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true
 COPY rootfs /
 RUN /opt/bitnami/scripts/ghost/postunpack.sh
 RUN /opt/bitnami/scripts/mysql-client/postunpack.sh
-ENV APP_VERSION="6.43.1" \
+ENV APP_VERSION="6.44.1" \
     BITNAMI_APP_NAME="ghost" \
     IMAGE_REVISION="0" \
     PATH="/opt/bitnami/common/bin:/opt/bitnami/python/bin:/opt/bitnami/node/bin:/opt/bitnami/mysql/bin:/opt/bitnami/ghost/bin:$PATH"
diff --git a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.43.1-0-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.43.1-0-linux-amd64-debian-12.tar.gz.sha256
deleted file mode 100644
index 6a9a9a7e0656..000000000000
--- a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.43.1-0-linux-amd64-debian-12.tar.gz.sha256
+++ /dev/null
@@ -1 +0,0 @@
-cd7c524424262b5333c81b6f517e4abe80df879968cccc28a9181762c08afff3  ghost-6.43.1-0-linux-amd64-debian-12.tar.gz
diff --git a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.43.1-0-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.43.1-0-linux-arm64-debian-12.tar.gz.sha256
deleted file mode 100644
index 3aa8c63a4cb2..000000000000
--- a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.43.1-0-linux-arm64-debian-12.tar.gz.sha256
+++ /dev/null
@@ -1 +0,0 @@
-e5927682b6b0eed36326c3d051e621ba729cdfd21d0fea56155f5b549b5689e9  ghost-6.43.1-0-linux-arm64-debian-12.tar.gz
diff --git a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.44.1-0-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.44.1-0-linux-amd64-debian-12.tar.gz.sha256
new file mode 100644
index 000000000000..69478e23087f
--- /dev/null
+++ b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.44.1-0-linux-amd64-debian-12.tar.gz.sha256
@@ -0,0 +1 @@
+be642f7a1598f2039ef421866f72bd18be2563dd046b705feb880ded5a25c7ca  ghost-6.44.1-0-linux-amd64-debian-12.tar.gz
diff --git a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.44.1-0-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.44.1-0-linux-arm64-debian-12.tar.gz.sha256
new file mode 100644
index 000000000000..2bb05e75d608
--- /dev/null
+++ b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/ghost-6.44.1-0-linux-arm64-debian-12.tar.gz.sha256
@@ -0,0 +1 @@
+021352a556168ceba97989bdff39c55f4dde3f49961106553c5534e17106f192  ghost-6.44.1-0-linux-arm64-debian-12.tar.gz
diff --git a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-11-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-11-linux-amd64-debian-12.tar.gz.sha256
deleted file mode 100644
index d8d64cc5e94a..000000000000
--- a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-11-linux-amd64-debian-12.tar.gz.sha256
+++ /dev/null
@@ -1 +0,0 @@
-a13e9f6ab18a719682fd94b0bdd131a771835c8cb707e2451c472a8b6927f3f7  python-3.12.13-11-linux-amd64-debian-12.tar.gz
diff --git a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-11-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-11-linux-arm64-debian-12.tar.gz.sha256
deleted file mode 100644
index 694ac13e1718..000000000000
--- a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-11-linux-arm64-debian-12.tar.gz.sha256
+++ /dev/null
@@ -1 +0,0 @@
-f79c0e2b0c9179091f9b06c650c757680b91a9f655538e85968cce732f150ab6  python-3.12.13-11-linux-arm64-debian-12.tar.gz
diff --git a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-12-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-12-linux-amd64-debian-12.tar.gz.sha256
new file mode 100644
index 000000000000..b11c0e2efd32
--- /dev/null
+++ b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-12-linux-amd64-debian-12.tar.gz.sha256
@@ -0,0 +1 @@
+d750a115785a56002ab62b67f1cd27148f29d7640993606a50331c42908cedb9  python-3.12.13-12-linux-amd64-debian-12.tar.gz
diff --git a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-12-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-12-linux-arm64-debian-12.tar.gz.sha256
new file mode 100644
index 000000000000..5f561659e5f4
--- /dev/null
+++ b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/checksums/python-3.12.13-12-linux-arm64-debian-12.tar.gz.sha256
@@ -0,0 +1 @@
+167870501660cdb2d9075f029431ffd97b83fae928d0f3cc476faa5c96d490fe  python-3.12.13-12-linux-arm64-debian-12.tar.gz
diff --git a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libos.sh b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libos.sh
index 9d908c48579b..2d3c3bdb5f4a 100644
--- a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libos.sh
+++ b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libos.sh
@@ -170,7 +170,7 @@ ensure_user_exists() {
     if [[ -n "$home" ]]; then
         mkdir -p "$home"
         usermod -d "$home" "$user" >/dev/null 2>&1
-        configure_permissions_ownership "$home" -d "775" -f "664" -u "$user" -g "$group"
+        configure_permissions_ownership "$home" -d "775" -f "664" -u "$user" -g "$group" -n
     fi
 }
 
diff --git a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libvalidations.sh b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libvalidations.sh
index bbd31b26bb2c..3a996383cfab 100644
--- a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libvalidations.sh
+++ b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libvalidations.sh
@@ -20,7 +20,7 @@
 #########################
 is_int() {
     local -r int="${1:?missing value}"
-    if [[ "$int" =~ ^-?[0-9]+ ]]; then
+    if [[ "$int" =~ ^-?[0-9]+$ ]]; then
         true
     else
         false
diff --git a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libversion.sh b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libversion.sh
index f0d5a5cd3389..770861ecedcd 100644
--- a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libversion.sh
+++ b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libversion.sh
@@ -49,3 +49,36 @@ get_sematic_version () {
         fi
     fi
 }
+
+########################
+# Compares two semantic versions
+# Arguments:
+#   $1 - version1: first version to compare
+#   $2 - version2: second version to compare
+# Returns:
+#   -1 if version1 is less than version2
+#   0 if version1 is equal to version2
+#   1 if version1 is greater than version2
+#########################
+compare_semantic_versions() {
+    local version1="${1:?version1 is required}"
+    local version2="${2:?version2 is required}"
+    local major1 major2 minor1 minor2 patch1 patch2
+
+    major1="$(get_sematic_version "$version1" 1)"
+    major2="$(get_sematic_version "$version2" 1)"
+    minor1="$(get_sematic_version "$version1" 2)"
+    minor2="$(get_sematic_version "$version2" 2)"
+    patch1="$(get_sematic_version "$version1" 3)"
+    patch2="$(get_sematic_version "$version2" 3)"
+
+    if [[ "$major1" -eq "$major2" ]] && [[ "$minor1" -eq "$minor2" ]] && [[ "$patch1" -eq "$patch2" ]]; then
+        echo "0"
+    elif [[ "$major1" -lt "$major2" ]] ||
+      { [[ "$major1" -eq "$major2" ]] && [[ "$minor1" -lt "$minor2" ]]; } ||
+      { [[ "$major1" -eq "$major2" ]] && [[ "$minor1" -eq "$minor2" ]] && [[ "$patch1" -lt "$patch2" ]]; }; then
+        echo "-1"
+    else
+        echo "1"
+    fi
+}
diff --git a/bitnami/ghost/6/debian-12/rootfs/opt/bitnami/scripts/libghost.sh b/bitnami/ghost/6/debian-12/rootfs/opt/bitnami/scripts/libghost.sh
index b345be784e06..c4939c407062 100644
--- a/bitnami/ghost/6/debian-12/rootfs/opt/bitnami/scripts/libghost.sh
+++ b/bitnami/ghost/6/debian-12/rootfs/opt/bitnami/scripts/libghost.sh
@@ -294,7 +294,7 @@ ghost_initialize() {
                 "--no-setup-systemd" "--no-setup-linux-user"
                 "--no-check-mem"
                 "--url" "$base_url"
-                "--ip" "0.0.0.0"
+                "--ip" "127.0.0.1"
                 "--port" "$port"
                 "--log" "file"
                 "--process" "local" "--no-prompt" "--no-start" "--no-enable"
@@ -326,6 +326,12 @@ ghost_initialize() {
             # Configure Admin account
             ghost_pass_wizard
             mv "$GHOST_LOG_FILE" "${GHOST_BASE_DIR}/content/logs/ghost.setup.log"
+            # After passing the wizard, we can bind to 0.0.0.0
+            if am_i_root; then
+                debug_execute run_as_user "$GHOST_DAEMON_USER" ghost setup "--ip" "0.0.0.0"
+            else
+                debug_execute ghost setup "--ip" "0.0.0.0"
+            fi
         else
             info "An already initialized Ghost database was provided, configuration will be skipped"
         fi
diff --git a/bitnami/ghost/6/debian-12/rootfs/opt/bitnami/scripts/libmysqlclient.sh b/bitnami/ghost/6/debian-12/rootfs/opt/bitnami/scripts/libmysqlclient.sh
index 1a3ae0d0dc67..97ab588065ce 100644
--- a/bitnami/ghost/6/debian-12/rootfs/opt/bitnami/scripts/libmysqlclient.sh
+++ b/bitnami/ghost/6/debian-12/rootfs/opt/bitnami/scripts/libmysqlclient.sh
@@ -263,12 +263,6 @@ mysql_execute_print_output() {
     fi
     args+=("-N" "-u" "$user")
     [[ -n "$db" ]] && args+=("$db")
-    # Avoid passing credentials as arguments to mysql, to avoid leaking them given a local observer with /proc read access can read them
-    if [[ -n "$pass" ]]; then
-        local pass_file
-        pass_file="$(credential_to_temp_file "$pass")"
-        args+=("-p$(<"$pass_file")")
-    fi
     [[ "${#opts[@]}" -gt 0 ]] && args+=("${opts[@]}")
     [[ "${#extra_opts[@]}" -gt 0 ]] && args+=("${extra_opts[@]}")
 
@@ -276,11 +270,19 @@ mysql_execute_print_output() {
     if [[ "${BITNAMI_DEBUG:-false}" = true ]]; then
         local mysql_cmd
         mysql_cmd="$(</dev/stdin)"
-        "$(mysql_binary)" "${args[@]}" <<<"$mysql_cmd"
+        if [[ -n "$pass" ]]; then
+            MYSQL_PWD="$pass" "$(mysql_binary)" "${args[@]}" <<<"$mysql_cmd"
+        else
+            "$(mysql_binary)" "${args[@]}" <<<"$mysql_cmd"
+        fi
     else
         # Do not store the command(s) as a variable, to avoid issues when importing large files
         # https://github.com/bitnami/bitnami-docker-mariadb/issues/251
-        "$(mysql_binary)" "${args[@]}"
+        if [[ -n "$pass" ]]; then
+            MYSQL_PWD="$pass" "$(mysql_binary)" "${args[@]}"
+        else
+            "$(mysql_binary)" "${args[@]}"
+        fi
     fi
 }
 
@@ -992,13 +994,10 @@ mysql_healthcheck() {
 
     root_password="$(get_master_env_var_value ROOT_PASSWORD)"
     if [[ -n "$root_password" ]]; then
-        # Avoid passing credentials as arguments to mysqladmin, to avoid leaking them given a local observer with /proc read access can read them
-        local root_password_file
-        root_password_file="$(credential_to_temp_file "$root_password")"
-        args+=("-p$(<"$root_password_file")")
+        MYSQL_PWD="$root_password" mysqladmin "${args[@]}" ping && MYSQL_PWD="$root_password" mysqladmin "${args[@]}" status
+    else
+        mysqladmin "${args[@]}" ping && mysqladmin "${args[@]}" status
     fi
-
-    mysqladmin "${args[@]}" ping && mysqladmin "${args[@]}" status
 }
 
 ########################