Lucee 5.4.2 and 6.0 now has anti-XXE configuration enabled by default

I have gone back and got the builds working for 5.3.9, 5.3.8 and 5.3.7

I know some people are still running these older versions, so I have backported this change

5.3.9.172-SNAPSHOT
5.3.8.236-SNAPSHOT
5.3.7.58-SNAPSHOT

https://hub.docker.com/r/lucee/lucee/tags?page=1&name=5.3.9.172
https://hub.docker.com/r/lucee/lucee/tags?page=1&name=5.3.8.236
https://hub.docker.com/r/lucee/lucee/tags?page=1&name=5.3.7.58

There are additional fixes in these SNAPSHOT since the last STABLE, they have been used in production, but as always you will need to test these builds yourself.

There will be no RC or STABLE releases for these older versions, you really should be upgrading to 5.4.2

1 Like