Skip to content

Fess 14.19.2

Choose a tag to compare

View all tags
@marevol marevol released this 24 May 05:00
· 465 commits to master since this release
fess-14.19.2
83e9e70

Fess 14.19.2

We’re releasing Fess 14.19.2, a minor update that includes security enhancements and improvements to file crawling behavior and cookie handling.

🔒 Security Fixes

  • CVE-2025-48382: Fixed insecure temporary file permissions used during processing.
    This update improves file system security when handling temporary data on all platforms.

🔧 Improvements

  • Controlled Recursion for File List Crawling
    Added depth control for recursive file list crawling to improve resource usage and prevent unexpected deep traversal.
    (#2878)

  • Secure Cookie Refactoring
    Refactored cookie security logic by introducing isSecureCookie() for consistent handling of secure attributes.
    (#2880)

We recommend all users update to this version, especially those using file crawling features or deploying Fess in shared environments.

For more details, please visit the documentation or join the discussion on the community forum.

Thank you for using Fess!

Assets 5
Loading