Blog

CommandBox 5.9.1 Released!

Brad Wood August 16, 2023

Spread the word

Brad Wood

August 16, 2023

Spread the word


Share your thoughts

We are pleased to announce the general availability of CommandBox 5.9.1. This is a very small release with two changes.

  • Update to Lucee 5.4.3.2
  • Update bundled JRE to 11.0.20+8

Note Lucee 5.4.3.2 contains critical security patches which are outlined here:

https://dev.lucee.org/t/lucee-critical-security-alert-august-15th-2023-cve-2023-38693/12893

The new Lucee version affects the core CLI runtime as well as the default server you get when running "server start" with no cfengine specified.  Possible compatibility issues related to the major bump in Lucee version:

  • This Lucee version does not include Hibernate, so the Ortus Hibernate extension is installed.  We will stop doing this in 6.0
  • This Lucee version has strict XML parsing settings on by default which may affect any servers you start which parse XML containing DTDs.

If you do run into XML errors, this code may help you in your Application.cfc, which allows DTDs, but still disallows XML external entities (XEE).

this.xmlFeatures={
	externalGeneralEntities: false,
	disallowDoctypeDecl: false
};

Release notes

Task

Add Your Comment

Recent Entries

CBWIRE 3.1 Released

CBWIRE 3.1 Released

I'm very excited to announce the latest release of CBWIRE, version 3.1. This release contains a couple of bug fixes, but mostly it's packed with new features that you can start using right away in your applications.

Grant Copley
Grant Copley
September 25, 2023
CFCast Series: Mastering CBWIRE 3

CFCast Series: Mastering CBWIRE 3

CBWIRE, a ColdBox module, enables you to quickly develop modern, responsive CFML applications without relying heavily on JavaScript or creating backend APIs. With CBWIRE, you can become a web development hero!

We have just published the first video of our series, more coming soon!

Maria Jose Herrera
Maria Jose Herrera
September 20, 2023
Our Into the Box 2024 Venue and Dates are Set!

Our Into the Box 2024 Venue and Dates are Set!

We've eagerly awaited sharing this news with you; the moment has finally arrived! The venue for our upcoming Into the Box 2024 is now confirmed and will set the stage for an unforgettable experience. Get ready to immerse yourself in the atmosphere of ITB2024 like never before.

Maria Jose Herrera
Maria Jose Herrera
August 15, 2023