Re: [ANN] Apache Struts 2.5.8 GA

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: [ANN] Apache Struts 2.5.8 GA

Christoph Nenning
Thanks Lukasz!






Lukasz Lenart <[hidden email]> schrieb am 19.12.2016 15:50:39:

> From: Lukasz Lenart <[hidden email]>
> To: Struts Users Mailing List <[hidden email]>,
> "[hidden email]" <[hidden email]>,
> [hidden email],
> Date: 19.12.2016 16:54
> Subject: [ANN] Apache Struts 2.5.8 GA
>
> The Apache Struts group is pleased to announce that Struts 2.5.8 is
> available as a “General Availability” release. The GA designation is
> our highest quality grade.
>
> Apache Struts 2 is an elegant, extensible framework for creating
> enterprise-ready Java web applications. The framework is designed to
> streamline the full development cycle, from building, to deploying, to
> maintaining applications over time.
>
> This release addresses one potential security vulnerability:
> - Possible DoS attack when using URLValidator - S2-044
>
> Also this release contains several breaking changes and improvements
> just to mention few of them:
> - Included XSL files’ URI not being resolved for actions with result
> type="xslt", see WW-2561
> - ConcurrentModificationException using s:iterator (intermittent), see
WW-3019
> - ObjectFactory reporting ERROR’s when you attempt to set parameters
> on a Redirect result, see WW-3170
> - preselect values in <s:optgroup>, see WW-4367
> - File upload error message always in default language, see WW-4636
> - Can no longer clear parameter on a <s:url> tag, see WW-4701
> - List based parameters no longer work when there is only one value,
> see WW-4702
> - NullPointerException in ActionSupport when use ModelDriven, see
WW-4703

> - Multiselect parameter behavior different between struts 2.5.5 and
> 2.5.1, see WW-4707
> - Invalid field value for field “id”, see WW-4709
> - Scope interceptor always resets because of
> org.apache.struts2.dispatcher.HttpParameters, see WW-4715
> - focusElement form attribute not working, see WW-4718
> - Portlet Issue with I18Interceptor, see WW-4722
> - Allow <constant/> value substitution in XML configuration, see WW-4698
> - Upgrade to latest OGNL version, see WW-4704
> - Add support for long type to <s:date> tag, see WW-4705
> - Disallow access to HttpParameters.toMap, see WW-4710
> - <s:text/> tag should not evaluate defaultMessage against a
> ValueStack by default, see WW-4711
> - TextProviderHelper#getText() should perform cleaning of
> defaultMessage, see WW-4712
> - Refactor file upload support to allow create virtual representation
> of java.io.File, see WW-4717
> - Move DefaultClassFinder into Convention plugin, see WW-4719
> - HttpParameters should behave like a Map, see WW-4720
> - Add support for roundingMode in <s:number/> tag, see WW-4721
>
> Version notes
> http://struts.apache.org/docs/version-notes-258.html
>
> All developers are strongly advised to perform this action.
>
> The 2.5.x series of the Apache Struts framework has a minimum
> requirement of the following specification versions: Servlet API 2.4,
> JSP API 2.0, and Java 7.
>
> Should any issues arise with your use of any version of the Struts
> framework, please post your comments to the user list, and, if
> appropriate, file a tracking ticket.
>
> You can download this version from our download page.
> http://struts.apache.org/download.html#struts-ga
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/


This Email was scanned by Sophos Anti Virus
Loading...