struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Yasser Zamani <>
Subject Re: Which Struts Version To Use?
Date Tue, 19 Sep 2017 07:34:48 GMT
I'm sorry for duplicate mails. Microsoft's outlook services was down 
yesterday! while I thought there is a problem with me :)

Bruce, I had experience with migrating from 2.3 to 2.5. Its time 
commitment is not high. I did a few small steps manually but for rest, I 
could do them by a regular expression enabled replace. Then I tested 
converted one against our JMeter functional tests and all of them passed.

The only thing that I saw a few users complain, is when they want to 
access something which is excluded in new version due to security fixes. 
If any, then we can help you here.

Sincerely Yours,

On 9/18/2017 8:21 PM, Yasser Zamani wrote:
> On 9/18/2017 7:35 PM, Phillips, Bruce A wrote:
>> We still have a couple of web apps that are using Struts version 2.3.32
>> We want to update those web apps to the latest version of Struts but 
>> I’m not sure what version to update to.
>> I see a 2.5.13 and a 2.3.34 – both tags seem to be recently created.
>> Should I update to 2.5.13 or should I stay on the 2.3.X line?
>> Why are there different production tags (2.5.X and 2.3.X) ?
> Because The 2.5.x series introduced some breaking changes, so the 
> development is now branching, as 2.3.x is still supported. Basically we 
> backport some security fixes to 2.3.x without breaking things.
> So you can update to 2.3.34 without any needed change but you will not 
> get any further bug fixes but only security fixes. But if you update to 
> 2.5.13, then you need to do a few migration steps at [1], and then you 
> will get future both security and bug fixes.
> I recommend updating to 2.5.13 as I already test [1] on our app and all 
> of our JMeter functional tests pass in it also.
> Hope this helps.
> [1]
>> Thank You,
>> Bruce Phillips
View raw message