Hi,
July 2022 security updates were released yesterday.
For Java 11, the following CVEs are applicable:
https://foojay.io/java-11/?quarter=072022&tab=cve
One of these is high CVSS score (7.5/10) and maybe possibly referenced from XML processing functionality that Lucee maybe possibly references when processing XML based web service remote CFC requests…
As such, we are looking at rolling out
jdk-11.0.16+8 ASAP to the Lucee servers we are responsible for.
Would it be possible
@bdw429s @jclausen to have a new build (and new tag on dockerhub) using this Java version?