roller-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dave <snoopd...@gmail.com>
Subject Re: Roller release to upgrade to struts 2.5.17?
Date Mon, 27 Aug 2018 03:34:00 GMT
and by this weekend I mean next weekend ;-)

On Sun, Aug 26, 2018 at 11:26 PM Dave <snoopdave@gmail.com> wrote:

> Hi Sean,
>
> Thanks for the note. I had not heard about this vulnerability until now.
> I'll take a look at Struts 2.5.17 this weekend and, hopefully, put together
> a release candidate that updates this dependency.
>
> Dave
>
> On Sun, Aug 26, 2018 at 4:12 PM Sean Pritchard <seanpritchard94@gmail.com>
> wrote:
>
>> Hi,
>>
>> A new version of struts was just released to address a critical
>> vulnerability:
>> https://cwiki.apache.org/confluence/display/WW/S2-057
>>
>> Does anyone know whether a new version of roller will be released soon to
>> include Struts 2.5.17?  Or should I plan to build from source if I want
>> the
>> newer struts version?
>>
>> Thanks,
>> Sean
>>
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message