首页
社区
课程
招聘
Struts 2.3.16.2 GA release available - security fix
发表于: 2014-4-29 22:33 803

Struts 2.3.16.2 GA release available - security fix

2014-4-29 22:33
803
新闻链接:2d8K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3#2S2K9h3I4Q4x3X3c8S2M7X3y4Z5K9i4k6W2M7#2)9J5k6h3q4H3j5h3y4Z5k6g2)9J5k6h3!0J5k6#2)9J5c8X3#2G2k6q4)9#2k6X3#2T1L8%4S2Q4x3V1k6K6N6s2u0#2N6s2y4Q4x3X3c8S2L8X3&6G2N6h3&6U0k6h3#2W2L8Y4c8K6i4K6u0r3x3U0l9I4y4o6l9@1i4K6u0W2L8h3u0G2P5q4)9J5c8W2)9J5y4e0y4o6b7@1q4y4L8%4m8$3K9@1#2W2K9e0c8J5x3p5g2C8g2i4N6I4K9p5&6V1K9X3E0T1x3q4)9J5k6p5Z5#2d9#2g2S2i4K6u0n7K9V1I4*7x3#2)9#2k6W2x3I4h3W2k6T1b7#2)9J5b7X3E0J5e0Y4Z5I4h3g2q4Q4y4o6m8E0j5h3W2D9i4K6u0W2k6$3#2S2K9h3I4Q4x3X3g2U0L8$3#2Q4x3U0f1K6c8b7`.`.

新闻时间: 26 Apr 2014

新闻正文:
he Apache Struts group is pleased to announce that Struts 2.3.16.2 is
available as a "General Availability" release.The GA designation is
our highest quality grade.

Apache Struts 2 is an elegant, extensible framework for creating
enterprise-ready Java web applications. The framework is designed to
streamline the full development cycle, from building, to deploying, to
maintaining applications over time.

This release includes important security fixes:
- S2-021 - Improves excluded params to avoid ClassLoader manipulation
via ParametersInterceptor
- S2-021 - Adds excluded params to CookieInterceptor to avoid
ClassLoader manipulation when the interceptors is configured to accept
all cookie names (wildcard matching via "*")

* b20K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4y4@1M7Y4g2@1M7#2)9J5k6h3q4H3j5h3y4Z5k6g2)9J5k6h3!0J5k6#2)9J5c8Y4u0W2L8r3g2S2M7$3g2Q4x3V1j5J5i4K6u0W2x3#2)9J5k6i4S2Q4x3V1k6V1L8$3y4K6i4K6u0r3M7K6u0Q4x3X3b7H3x3U0q4Q4x3X3g2Z5N6r3#2D9

All developers are strongly advised to update existing Struts 2
applications to Struts 2.3.16.2

Struts 2.3.16.2 is available in a full distribution, or as separate
library, source, example and documentation distributions, from the
releases page.
* 8f4K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4y4@1M7Y4g2@1M7#2)9J5k6h3q4H3j5h3y4Z5k6g2)9J5k6h3!0J5k6#2)9J5c8X3c8G2N6$3&6D9L8$3q4V1i4K6u0W2j5$3N6A6i4K6t1K6M7%4c8J5N6i4c8K6x3U0x3I4y4U0t1`.

The release is also available from the central Maven repository under
Group ID "org.apache.struts".

The 2.3.x series of the Apache Struts framework has a minimum
requirement of the following specification versions:
* Java Servlet 2.4 and JavaServer Pages (JSP) 2.0
* Java 2 Standard Platform Edition (J2SE) 5

The release notes are available online at:
* 293K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4y4@1M7Y4g2@1M7#2)9J5k6h3q4H3j5h3y4Z5k6g2)9J5k6h3!0J5k6#2)9J5c8Y4u0W2L8r3g2S2M7$3g2Q4x3V1j5J5i4K6u0W2x3#2)9J5k6i4S2Q4x3V1k6V1L8$3y4K6i4K6u0r3N6X3g2J5M7$3W2G2L8W2)9J5k6r3&6G2N6r3g2K6i4K6u0V1x3U0x3I4y4U0u0Q4x3X3g2Z5N6r3#2D9

Should any issues arise with your use of any version of the Struts
framework, please post your comments to the user list, and, if
appropriate, file a tracking ticket.appropriate, file a tracking
ticket:
* d99K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6A6M7%4y4#2k6i4y4Q4x3X3g2S2M7r3q4U0K9r3g2Q4x3X3g2G2M7X3N6Q4x3V1k6B7K9i4u0S2i4K6u0r3j5Y4u0G2N6%4y4W2i4K6u0r3g2#2M7`.

[培训]科锐逆向工程师培训第53期2025年7月8日开班!

收藏
免费 0
支持
分享
最新回复 (0)
游客
登录 | 注册 方可回帖
返回