struts-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From rgie...@apache.org
Subject svn commit: r706878 - in /struts/site/src/site: site.xml xdoc/announce.xml xdoc/download.xml xdoc/downloads.xml xdoc/index.xml
Date Wed, 22 Oct 2008 07:51:31 GMT
Author: rgielen
Date: Wed Oct 22 00:51:30 2008
New Revision: 706878

URL: http://svn.apache.org/viewvc?rev=706878&view=rev
Log:
Site updates for 2.0.12 GA

Modified:
    struts/site/src/site/site.xml
    struts/site/src/site/xdoc/announce.xml
    struts/site/src/site/xdoc/download.xml
    struts/site/src/site/xdoc/downloads.xml
    struts/site/src/site/xdoc/index.xml

Modified: struts/site/src/site/site.xml
URL: http://svn.apache.org/viewvc/struts/site/src/site/site.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/site.xml (original)
+++ struts/site/src/site/site.xml Wed Oct 22 00:51:30 2008
@@ -17,7 +17,7 @@
                     href="http://www.apache.org/" />
             <item
                     name="Struts 2"
-                    href="http://struts.apache.org/2.0.11.2/index.html" />
+                    href="http://struts.apache.org/2.0.12/index.html" />
             <item
                     name="Struts 1"
                     href="http://struts.apache.org/1.3.8/index.html" />
@@ -66,8 +66,8 @@
                     name="Struts 2.1.2 (Beta)"
                     href="http://struts.apache.org/2.1.2/index.html" />
             <item
-                    name="Struts 2.0.11.2 (GA)"
-                    href="http://struts.apache.org/2.0.11.2/index.html" />
+                    name="Struts 2.0.12 (GA)"
+                    href="http://struts.apache.org/2.0.12/index.html" />
             <item
                     name="Struts 1.3.9 (Beta)"
                     href="http://struts.apache.org/1.3.9/index.html" />

Modified: struts/site/src/site/xdoc/announce.xml
URL: http://svn.apache.org/viewvc/struts/site/src/site/xdoc/announce.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/xdoc/announce.xml (original)
+++ struts/site/src/site/xdoc/announce.xml Wed Oct 22 00:51:30 2008
@@ -29,6 +29,54 @@
                 Skip to: <a href="announce-2007.html">Announcements - 2007</a>
             </p>
 
+            <h4 id="a20081020">20 October 2008 - Struts 2.0.12 General Availability
Release</h4>
+            <p>
+            The Apache Struts group is pleased to announce that Struts 2.0.12 is
+            available as a "General Availability" release. The GA designation is
+            our highest quality grade.
+            </p>
+            <p>
+            Apache Struts 2 is an elegant, extensible framework for creating
+            enterprise-ready Java web applications. The framework is designed to
+            streamline the full development cycle, from building, to deploying, to
+            maintaining applications over time.
+            </p>
+            <p>
+            This release includes a number of bug fixes since the
+            2.0.11.2 GA release, including important security fixes regarding remote
+            server context manipulation by injecting OGNL expressions in request parameters
+            and possible server filesystem resources read access in certain application
+            server environments. For more information about the exploits, see the corresponding
+            security bulletins <a href="http://struts.apache.org/2.0.12/docs/s2-003.html">S2-003</a>
+            and <a href="http://struts.apache.org/2.0.12/docs/s2-004.html">S2-003</a>.
+            </p>
+            <p>
+            All developers are strongly advised to update existing Struts 2 applications
+            to Struts 2.0.12.
+            </p>
+            <p>
+            Struts 2.0.12 is available in a full distribution,
+            or as separate library, source, example and documentation
+            distributions, from the
+            <a href="http://struts.apache.org/download.cgi#struts2012">releases page</a>.
+            The release is also available through the central Maven repository under Group
ID
+            "org.apache.struts". The
+            <a href="http://struts.apache.org/2.0.12/docs/release-notes-2012.html">release
notes</a>
+            are available online.
+            </p>
+            <p>
+            The 2.0.x series of the Apache Struts framework has a minimum
+            requirement of the following specification versions: Servlet API 2.4,
+            JSP API 2.0, Java 5, Backported Java 4 JARs are also available.
+            </p>
+            <p>
+            Should any issues arise with your use of any version of the Struts
+            framework, please post your comments to the user list, and, if
+            appropriate, file a
+            <a href="https://issues.apache.org/struts/secure/Dashboard.jspa">tracking
ticket</a>.
+            </p>
+
+
             <h4 id="a20080204">4 February 2008 - New Struts Committer Jeromy Evans</h4>
             <p>
                 Please join us in welcoming Jeromy Evans as a new Struts committer.

Modified: struts/site/src/site/xdoc/download.xml
URL: http://svn.apache.org/viewvc/struts/site/src/site/xdoc/download.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/xdoc/download.xml (original)
+++ struts/site/src/site/xdoc/download.xml Wed Oct 22 00:51:30 2008
@@ -90,30 +90,30 @@
         <a name="struts-ga"/>
         <section name="Full Releases">
 
-            <a name="struts20112"/>
-            <subsection name="Struts 2.0.11.2">
+            <a name="struts2012"/>
+            <subsection name="Struts 2.0.12">
 
             <p>
-             <a href="http://struts.apache.org/2.0.11.2/">Apache Struts 2</a>
+             <a href="http://struts.apache.org/2.0.12/">Apache Struts 2</a>
              is an elegant, extensible framework
              for creating enterprise-ready Java web applications.
              It is available in a full distribution, or as
              separate library, source, example and documentation
              distributions.
-             Struts 2.0.11.2 is the "best available" version of Struts.
+             Struts 2.0.12 is the "best available" version of Struts.
             </p>
 
                 <ul>
                     <li>
-                      <a href="http://struts.apache.org/2.0.11.2/docs/release-notes-20112.html">Release
Notes</a>
+                      <a href="http://struts.apache.org/2.0.12/docs/release-notes-2012.html">Release
Notes</a>
                     </li>
 
                     <li>Full Distribution:
                         <ul>
                             <li>
-                                <a href="[preferred]/struts/binaries/struts-2.0.11.2-all.zip">struts-2.0.11.2-all.zip</a>
(91mb)
-                                [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.11.2-all.zip.asc">PGP</a>]
-                                [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.11.2-all.zip.md5">MD5</a>]
+                                <a href="[preferred]/struts/binaries/struts-2.0.12-all.zip">struts-2.0.12-all.zip</a>
(91mb)
+                                [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.12-all.zip.asc">PGP</a>]
+                                [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.12-all.zip.md5">MD5</a>]
                             </li>
                         </ul>
                     </li>
@@ -121,27 +121,27 @@
                     <li>Example Applications:
                         <ul>
                             <li>
-                                <a href="[preferred]/struts/examples/struts-2.0.11.2-apps.zip">struts-2.0.11.2-apps.zip</a>
(23mb)
-                                [<a href="http://www.apache.org/dist/struts/examples/struts-2.0.11.2-apps.zip.asc">PGP</a>]
-                                [<a href="http://www.apache.org/dist/struts/examples/struts-2.0.11.2-apps.zip.md5">MD5</a>]
+                                <a href="[preferred]/struts/examples/struts-2.0.12-apps.zip">struts-2.0.12-apps.zip</a>
(23mb)
+                                [<a href="http://www.apache.org/dist/struts/examples/struts-2.0.12-apps.zip.asc">PGP</a>]
+                                [<a href="http://www.apache.org/dist/struts/examples/struts-2.0.12-apps.zip.md5">MD5</a>]
                             </li>
                         </ul>
                     </li>
                     <li>Blank Application only:
                         <ul>
                             <li>
-                                <a href="[preferred]/struts/examples/struts2-blank-2.0.11.2.war">struts2-blank-2.0.11.2.war</a>
(Also included in apps.) (3mb)
-                                [<a href="http://www.apache.org/dist/struts/examples/struts2-blank-2.0.11.2.war.asc">PGP</a>]
-                                [<a href="http://www.apache.org/dist/struts/examples/struts2-blank-2.0.11.2.war.md5">MD5</a>]
+                                <a href="[preferred]/struts/examples/struts2-blank-2.0.12.war">struts2-blank-2.0.12.war</a>
(Also included in apps.) (3mb)
+                                [<a href="http://www.apache.org/dist/struts/examples/struts2-blank-2.0.12.war.asc">PGP</a>]
+                                [<a href="http://www.apache.org/dist/struts/examples/struts2-blank-2.0.12.war.md5">MD5</a>]
                             </li>
                         </ul>
                     </li>
                     <li>Essential Dependencies Only:
                         <ul>
                             <li>
-                                <a href="[preferred]/struts/library/struts-2.0.11.2-lib.zip">struts-2.0.11.2-lib.zip</a>
(4mb)
-                                [<a href="http://www.apache.org/dist/struts/library/struts-2.0.11.2-lib.zip.asc">PGP</a>]
-                                [<a href="http://www.apache.org/dist/struts/library/struts-2.0.11.2-lib.zip.md5">MD5</a>]
+                                <a href="[preferred]/struts/library/struts-2.0.12-lib.zip">struts-2.0.12-lib.zip</a>
(4mb)
+                                [<a href="http://www.apache.org/dist/struts/library/struts-2.0.12-lib.zip.asc">PGP</a>]
+                                [<a href="http://www.apache.org/dist/struts/library/struts-2.0.12-lib.zip.md5">MD5</a>]
                             </li>
                         </ul>
                     </li>
@@ -149,9 +149,9 @@
                     <li>Documentation:
                         <ul>
                             <li>
-                                <a href="[preferred]/struts/documentation/struts-2.0.11.2-docs.zip">struts-2.0.11.2-docs.zip</a>
(57mb)
-                                [<a href="http://www.apache.org/dist/struts/documentation/struts-2.0.11.2-docs.zip.asc">PGP</a>]
-                                [<a href="http://www.apache.org/dist/struts/documentation/struts-2.0.11.2-docs.zip.md5">MD5</a>]
+                                <a href="[preferred]/struts/documentation/struts-2.0.12-docs.zip">struts-2.0.12-docs.zip</a>
(57mb)
+                                [<a href="http://www.apache.org/dist/struts/documentation/struts-2.0.12-docs.zip.asc">PGP</a>]
+                                [<a href="http://www.apache.org/dist/struts/documentation/struts-2.0.12-docs.zip.md5">MD5</a>]
                             </li>
                         </ul>
                     </li>
@@ -159,9 +159,9 @@
                     <li>Source:
                         <ul>
                             <li>
-                                <a href="[preferred]/struts/source/struts-2.0.11.2-src.zip">struts-2.0.11.2-src.zip</a>
(22mb)
-                                [<a href="http://www.apache.org/dist/struts/source/struts-2.0.11.2-src.zip.asc">PGP</a>]
-                                [<a href="http://www.apache.org/dist/struts/source/struts-2.0.11.2-src.zip.md5">MD5</a>]
+                                <a href="[preferred]/struts/source/struts-2.0.12-src.zip">struts-2.0.12-src.zip</a>
(22mb)
+                                [<a href="http://www.apache.org/dist/struts/source/struts-2.0.12-src.zip.asc">PGP</a>]
+                                [<a href="http://www.apache.org/dist/struts/source/struts-2.0.12-src.zip.md5">MD5</a>]
                             </li>
                         </ul>
                     </li>
@@ -169,9 +169,9 @@
                     <li>Alternative Java 4 JARs:
                         <ul>
                             <li>
-                                <a href="[preferred]/struts/binaries/struts-2.0.11.2-backport.zip">struts-2.0.11.2-backport.zip</a>
(3mb)
-                                [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.11.2-backport.zip.asc">PGP</a>]
-                                [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.11.2-backport.zip.md5">MD5</a>]
+                                <a href="[preferred]/struts/binaries/struts-2.0.12-backport.zip">struts-2.0.12-backport.zip</a>
(3mb)
+                                [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.12-backport.zip.asc">PGP</a>]
+                                [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.12-backport.zip.md5">MD5</a>]
                             </li>
                         </ul>
                     </li>

Modified: struts/site/src/site/xdoc/downloads.xml
URL: http://svn.apache.org/viewvc/struts/site/src/site/xdoc/downloads.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/xdoc/downloads.xml (original)
+++ struts/site/src/site/xdoc/downloads.xml Wed Oct 22 00:51:30 2008
@@ -43,8 +43,8 @@
                         <strong>General Availability (GA) Releases</strong> -
<em>Ready for Prime Time!</em>
                         <ul>
                             <li>
-                                <a href="http://struts.apache.org/download.cgi#struts20112">
-                                    Struts 2.0.11.2
+                                <a href="http://struts.apache.org/download.cgi#struts2012">
+                                    Struts 2.0.12
                                 </a> ("best available")
                             </li>
                             <li>
@@ -121,6 +121,9 @@
 
             <ul>
                 <li>
+                    <a href="http://struts.apache.org/2.0.11.2/index.html">Struts 2.0.11.2</a>
+                </li>
+                <li>
                     <a href="http://struts.apache.org/2.0.11.1/index.html">Struts 2.0.11.1</a>
                 </li>
                 <li>

Modified: struts/site/src/site/xdoc/index.xml
URL: http://svn.apache.org/viewvc/struts/site/src/site/xdoc/index.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/xdoc/index.xml (original)
+++ struts/site/src/site/xdoc/index.xml Wed Oct 22 00:51:30 2008
@@ -57,57 +57,27 @@
                 <a href="http://struts.apache.org/download.cgi#struts212">Struts 2.1.2</a>,
                 which was promoted to "Beta" on 26 March 2008. For the latest
                 production release ("General Availability"), see
-                <a href="http://struts.apache.org/download.cgi#struts20112">Struts
2.0.11.2</a>.
+                <a href="http://struts.apache.org/download.cgi#struts2012">Struts 2.0.12</a>.
             </p>
             </subsection>
 
-            <a name="2.0.11.2"/>
-            <subsection name="30 June 2008 - Struts 2.0.11.2 General Availability Release">
+            <a name="2.0.12"/>
+            <subsection name="20 October 2008 - Struts 2.0.12 General Availability Release">
             <p>
                 The latest release of Struts 2 is
-                <a href="http://struts.apache.org/download.cgi#struts20112">Struts
2.0.11.2</a>,
-                which was promoted to "General Availability" on 30 June 2008.
+                <a href="http://struts.apache.org/download.cgi#struts2012">Struts 2.0.12</a>,
+                which was promoted to "General Availability" on 20 October 2008.
             </p>
 
             <p>
-                For changes included in Struts 2.0.11.2,
-                see the <a href="http://struts.apache.org/2.0.11.2/docs/release-notes-20112.html">release
notes</a>.
-                Struts 2.0.11.2 provides important security bugfixes since the 2.0.11.1 GA
release.
-            </p>
-            <p>
-                <b>IMPORTANT ADDITIONAL NOTES:</b>
-                <p/>
-                There are two known issues with this release:
-                <ol>
-                    <li>
-                        the integrated XWork 2.0.5 jar may cause problems when used in a
combination of WebSphere 6.1 runtime environments with validation configuration via XML files.
-                        Possible Workarounds:
-                        <ul>
-                            <li>use annotation based validation definition instead
XML based</li>
-                            <li>stay with Struts 2.0.11.1 including XWork 2.0.4, applying
the following exclude rule to your parameter interceptor refs in struts.xml
-<pre>
-&lt;interceptor-ref name="params"&gt;
-    &lt;param name="excludeParams"&gt;.*[[^\\p{Graph}][\\\\#:=]].*&lt;/param&gt;
-&lt;/interceptor-ref&gt;
-</pre>
-                            </li>
-                        </ul>
-                    </li>
-                    <li>
-                        the filtering mechanism implemeted in XWork's ParametersInterceptor
to fix the described security issue does not completely avoid any possible malicious parameter
name.
-                        Possible Workaround:
-                        <ul>
-                            <li>apply the following exclude rule to your parameter
interceptor refs in struts.xml to avoid the usage of backslash characters in parameter names
-<pre>
-&lt;interceptor-ref name="params"&gt;
-    &lt;param name="excludeParams"&gt;.*\\.*&lt;/param&gt;
-&lt;/interceptor-ref&gt;
-</pre>
-                            </li>
-                        </ul>
-                    </li>
-                </ol>
-                Both issues will be addressed in a soon upcoming XWork 2.0.6 release, followed
by a new Struts 2.0 GA release including this new XWork version.
+                For changes included in Struts 2.0.12,
+                see the <a href="http://struts.apache.org/2.0.12/docs/release-notes-2012.html">release
notes</a>.
+                Struts 2.0.12 provides important security and bug fixes since the 2.0.11.2
GA release.
+                For more information about the security issues, see the corresponding
+                security bulletins <a href="http://struts.apache.org/2.0.12/docs/s2-003.html">S2-003</a>
+                and <a href="http://struts.apache.org/2.0.12/docs/s2-004.html">S2-003</a>.
+                All developers are strongly advised to update existing Struts 2 applications
+                to Struts 2.0.12.
             </p>
             </subsection>
 



Mime
View raw message