Return-Path: X-Original-To: apmail-struts-dev-archive@www.apache.org Delivered-To: apmail-struts-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 742DA10FBE for ; Thu, 17 Oct 2013 20:58:12 +0000 (UTC) Received: (qmail 14534 invoked by uid 500); 17 Oct 2013 20:54:39 -0000 Delivered-To: apmail-struts-dev-archive@struts.apache.org Received: (qmail 14513 invoked by uid 500); 17 Oct 2013 20:54:38 -0000 Mailing-List: contact dev-help@struts.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Help: List-Post: List-Id: "Struts Developers List" Reply-To: "Struts Developers List" Delivered-To: mailing list dev@struts.apache.org Received: (qmail 14504 invoked by uid 99); 17 Oct 2013 20:54:36 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 17 Oct 2013 20:54:36 +0000 X-ASF-Spam-Status: No, hits=2.2 required=5.0 tests=HTML_MESSAGE,NORMAL_HTTP_TO_IP,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: local policy) Received: from [85.214.44.140] (HELO e.nrgie.net) (85.214.44.140) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 17 Oct 2013 20:54:30 +0000 Received: from android-8a1ce13d8e4af7f0.fritz.box (p508A1249.dip0.t-ipconnect.de [80.138.18.73]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by e.nrgie.net (Postfix) with ESMTP id 91C58B041AF for ; Thu, 17 Oct 2013 23:59:38 +0200 (CEST) User-Agent: K-9 Mail for Android In-Reply-To: References: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----EETG1ADXRRLX2282F7K02PKS6MUR14" Subject: Re: [ANN] Struts 2.3.15.3 GA release available - security fix From: Rene Gielen Date: Thu, 17 Oct 2013 22:52:04 +0200 To: Struts Developers List Message-ID: <7e29fefa-02c3-4df7-8685-7764dd35a39c@email.android.com> X-Virus-Checked: Checked by ClamAV on apache.org ------EETG1ADXRRLX2282F7K02PKS6MUR14 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Great job, Lukasz! Lukasz Lenart schrieb: >The Apache Struts group is pleased to announce that Struts 2.3.15.3 is >available as a "General Availability" release.The GA designation is >our highest quality grade. > >Apache Struts 2 is an elegant, extensible framework for creating >enterprise-ready Java web applications. The framework is designed to >streamline the full development cycle, from building, to deploying, to >maintaining applications over time. > >This release includes important security fixes: >- S2-018 - Broken Access Control Vulnerability in Apache Struts2 >- solved problem with action: prefix broken in 2.3.15.2 > >All developers are strongly advised to update existing Struts 2 >applications to Struts 2.3.15.3 > >Struts 2.3.15.3 is available in a full distribution, or as separate >library, source, example and documentation distributions, from the >releases page. >* http://struts.apache.org/download.cgi#struts23153 > >The release is also available from the central Maven repository under >Group ID "org.apache.struts". > >The 2.3.x series of the Apache Struts framework has a minimum >requirement of the following specification versions: >* Java Servlet 2.4 and JavaServer Pages (JSP) 2.0 >* Java 2 Standard Platform Edition (J2SE) 5 > >The release notes are available online at: >* http://struts.apache.org/release/2.3.x/docs/version-notes-23153.html > >Should any issues arise with your use of any version of the Struts >framework, please post your comments to the user list, and, if >appropriate, file a tracking ticket.appropriate, file a tracking >ticket: >* https://issues.apache.org/jira/browse/WW > > >- The Apache Struts group. > > >Regards >-- >Łukasz >+ 48 606 323 122 http://www.lenart.org.pl/ > >--------------------------------------------------------------------- >To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org >For additional commands, e-mail: dev-help@struts.apache.org -- Sent from my mobile phone ------EETG1ADXRRLX2282F7K02PKS6MUR14--