bordering on pornographic <https://github.com/luce...
# luceez
zackster
05/31/2023, 4:40 PMbordering on pornographic https://github.com/lucee/Lucee/actions/runs/5135427735/jobs/9240830323#step:7:11
with hsqldb 2.7.2, Lucee 6.0 core is now finally CVE free baby https://luceeserver.atlassian.net/browse/LDEV-1526
🙌 2
m
Mark Takata (Adobe)
05/31/2023, 4:41 PMSIR. There are children present and you post this? I am appalled. 🤣
z
zackster
05/31/2023, 4:42 PMi don't even count myself as an adult
😂 1
b
bdw429s
05/31/2023, 4:44 PMNo vulnerabilities found🫣
bdw429s
05/31/2023, 4:44 PM@zackster What version of Lucee is that being built?
z
zackster
05/31/2023, 4:44 PMa big part of this was switching to upstream libs, instead of lucee wrapped osgi bundles which hid cve's
🙌 1
zackster
05/31/2023, 4:45 PM6.0.0.419 / trunk
zackster
05/31/2023, 4:45 PMstill some shite in the extensions, google OSV just scans poms
m
Mark Takata (Adobe)
05/31/2023, 4:46 PM Copy code
i don't even count myself as an adultz
zackster
05/31/2023, 4:47 PMthat's why we front the cfml engines 🙂 stuck in the 90s
zackster
05/31/2023, 4:48 PMzackster
05/31/2023, 4:51 PMredis is also almost there https://github.com/lucee/extension-redis/commit/e87e8c8f0208b4ac8b68fa5d53a2ee22edc62131
m
Mark Takata (Adobe)
05/31/2023, 4:58 PMHeading for the nineties, living in the eighties
Screaming in a back room, waiting for the big boom.
z
zackster
05/31/2023, 4:59 PMimage.png
😎 1
zackster
05/31/2023, 5:27 PM@bdw429s says coldbox n testbox are passing with java 11 and java 17 with the latest 6 snapshot
zackster
05/31/2023, 5:28 PMTBH Lucee 6 works quite well with 17, just a few reflection/internal java classes bugs with dates and images
j
jamiejackson
05/31/2023, 7:06 PMi really appreciate the attention to the CVEs. thanks, folks!
jamiejackson
05/31/2023, 7:11 PMand sorry on behalf of my family for all of the com.fasterxml.jackson vulnerabilities we allowed to accumulate.
z
zackster
05/31/2023, 7:25 PMhehe
3 Views