You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@struts.apache.org by rg...@apache.org on 2008/10/22 09:51:31 UTC
svn commit: r706878 - in /struts/site/src/site: site.xml xdoc/announce.xml
xdoc/download.xml xdoc/downloads.xml xdoc/index.xml
Author: rgielen
Date: Wed Oct 22 00:51:30 2008
New Revision: 706878
URL: http://svn.apache.org/viewvc?rev=706878&view=rev
Log:
Site updates for 2.0.12 GA
Modified:
struts/site/src/site/site.xml
struts/site/src/site/xdoc/announce.xml
struts/site/src/site/xdoc/download.xml
struts/site/src/site/xdoc/downloads.xml
struts/site/src/site/xdoc/index.xml
Modified: struts/site/src/site/site.xml
URL: http://svn.apache.org/viewvc/struts/site/src/site/site.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/site.xml (original)
+++ struts/site/src/site/site.xml Wed Oct 22 00:51:30 2008
@@ -17,7 +17,7 @@
href="http://www.apache.org/" />
<item
name="Struts 2"
- href="http://struts.apache.org/2.0.11.2/index.html" />
+ href="http://struts.apache.org/2.0.12/index.html" />
<item
name="Struts 1"
href="http://struts.apache.org/1.3.8/index.html" />
@@ -66,8 +66,8 @@
name="Struts 2.1.2 (Beta)"
href="http://struts.apache.org/2.1.2/index.html" />
<item
- name="Struts 2.0.11.2 (GA)"
- href="http://struts.apache.org/2.0.11.2/index.html" />
+ name="Struts 2.0.12 (GA)"
+ href="http://struts.apache.org/2.0.12/index.html" />
<item
name="Struts 1.3.9 (Beta)"
href="http://struts.apache.org/1.3.9/index.html" />
Modified: struts/site/src/site/xdoc/announce.xml
URL: http://svn.apache.org/viewvc/struts/site/src/site/xdoc/announce.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/xdoc/announce.xml (original)
+++ struts/site/src/site/xdoc/announce.xml Wed Oct 22 00:51:30 2008
@@ -29,6 +29,54 @@
Skip to: <a href="announce-2007.html">Announcements - 2007</a>
</p>
+ <h4 id="a20081020">20 October 2008 - Struts 2.0.12 General Availability Release</h4>
+ <p>
+ The Apache Struts group is pleased to announce that Struts 2.0.12 is
+ available as a "General Availability" release. The GA designation is
+ our highest quality grade.
+ </p>
+ <p>
+ Apache Struts 2 is an elegant, extensible framework for creating
+ enterprise-ready Java web applications. The framework is designed to
+ streamline the full development cycle, from building, to deploying, to
+ maintaining applications over time.
+ </p>
+ <p>
+ This release includes a number of bug fixes since the
+ 2.0.11.2 GA release, including important security fixes regarding remote
+ server context manipulation by injecting OGNL expressions in request parameters
+ and possible server filesystem resources read access in certain application
+ server environments. For more information about the exploits, see the corresponding
+ security bulletins <a href="http://struts.apache.org/2.0.12/docs/s2-003.html">S2-003</a>
+ and <a href="http://struts.apache.org/2.0.12/docs/s2-004.html">S2-003</a>.
+ </p>
+ <p>
+ All developers are strongly advised to update existing Struts 2 applications
+ to Struts 2.0.12.
+ </p>
+ <p>
+ Struts 2.0.12 is available in a full distribution,
+ or as separate library, source, example and documentation
+ distributions, from the
+ <a href="http://struts.apache.org/download.cgi#struts2012">releases page</a>.
+ The release is also available through the central Maven repository under Group ID
+ "org.apache.struts". The
+ <a href="http://struts.apache.org/2.0.12/docs/release-notes-2012.html">release notes</a>
+ are available online.
+ </p>
+ <p>
+ The 2.0.x series of the Apache Struts framework has a minimum
+ requirement of the following specification versions: Servlet API 2.4,
+ JSP API 2.0, Java 5, Backported Java 4 JARs are also available.
+ </p>
+ <p>
+ Should any issues arise with your use of any version of the Struts
+ framework, please post your comments to the user list, and, if
+ appropriate, file a
+ <a href="https://issues.apache.org/struts/secure/Dashboard.jspa">tracking ticket</a>.
+ </p>
+
+
<h4 id="a20080204">4 February 2008 - New Struts Committer Jeromy Evans</h4>
<p>
Please join us in welcoming Jeromy Evans as a new Struts committer.
Modified: struts/site/src/site/xdoc/download.xml
URL: http://svn.apache.org/viewvc/struts/site/src/site/xdoc/download.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/xdoc/download.xml (original)
+++ struts/site/src/site/xdoc/download.xml Wed Oct 22 00:51:30 2008
@@ -90,30 +90,30 @@
<a name="struts-ga"/>
<section name="Full Releases">
- <a name="struts20112"/>
- <subsection name="Struts 2.0.11.2">
+ <a name="struts2012"/>
+ <subsection name="Struts 2.0.12">
<p>
- <a href="http://struts.apache.org/2.0.11.2/">Apache Struts 2</a>
+ <a href="http://struts.apache.org/2.0.12/">Apache Struts 2</a>
is an elegant, extensible framework
for creating enterprise-ready Java web applications.
It is available in a full distribution, or as
separate library, source, example and documentation
distributions.
- Struts 2.0.11.2 is the "best available" version of Struts.
+ Struts 2.0.12 is the "best available" version of Struts.
</p>
<ul>
<li>
- <a href="http://struts.apache.org/2.0.11.2/docs/release-notes-20112.html">Release Notes</a>
+ <a href="http://struts.apache.org/2.0.12/docs/release-notes-2012.html">Release Notes</a>
</li>
<li>Full Distribution:
<ul>
<li>
- <a href="[preferred]/struts/binaries/struts-2.0.11.2-all.zip">struts-2.0.11.2-all.zip</a> (91mb)
- [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.11.2-all.zip.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.11.2-all.zip.md5">MD5</a>]
+ <a href="[preferred]/struts/binaries/struts-2.0.12-all.zip">struts-2.0.12-all.zip</a> (91mb)
+ [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.12-all.zip.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.12-all.zip.md5">MD5</a>]
</li>
</ul>
</li>
@@ -121,27 +121,27 @@
<li>Example Applications:
<ul>
<li>
- <a href="[preferred]/struts/examples/struts-2.0.11.2-apps.zip">struts-2.0.11.2-apps.zip</a> (23mb)
- [<a href="http://www.apache.org/dist/struts/examples/struts-2.0.11.2-apps.zip.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/struts/examples/struts-2.0.11.2-apps.zip.md5">MD5</a>]
+ <a href="[preferred]/struts/examples/struts-2.0.12-apps.zip">struts-2.0.12-apps.zip</a> (23mb)
+ [<a href="http://www.apache.org/dist/struts/examples/struts-2.0.12-apps.zip.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/struts/examples/struts-2.0.12-apps.zip.md5">MD5</a>]
</li>
</ul>
</li>
<li>Blank Application only:
<ul>
<li>
- <a href="[preferred]/struts/examples/struts2-blank-2.0.11.2.war">struts2-blank-2.0.11.2.war</a> (Also included in apps.) (3mb)
- [<a href="http://www.apache.org/dist/struts/examples/struts2-blank-2.0.11.2.war.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/struts/examples/struts2-blank-2.0.11.2.war.md5">MD5</a>]
+ <a href="[preferred]/struts/examples/struts2-blank-2.0.12.war">struts2-blank-2.0.12.war</a> (Also included in apps.) (3mb)
+ [<a href="http://www.apache.org/dist/struts/examples/struts2-blank-2.0.12.war.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/struts/examples/struts2-blank-2.0.12.war.md5">MD5</a>]
</li>
</ul>
</li>
<li>Essential Dependencies Only:
<ul>
<li>
- <a href="[preferred]/struts/library/struts-2.0.11.2-lib.zip">struts-2.0.11.2-lib.zip</a> (4mb)
- [<a href="http://www.apache.org/dist/struts/library/struts-2.0.11.2-lib.zip.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/struts/library/struts-2.0.11.2-lib.zip.md5">MD5</a>]
+ <a href="[preferred]/struts/library/struts-2.0.12-lib.zip">struts-2.0.12-lib.zip</a> (4mb)
+ [<a href="http://www.apache.org/dist/struts/library/struts-2.0.12-lib.zip.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/struts/library/struts-2.0.12-lib.zip.md5">MD5</a>]
</li>
</ul>
</li>
@@ -149,9 +149,9 @@
<li>Documentation:
<ul>
<li>
- <a href="[preferred]/struts/documentation/struts-2.0.11.2-docs.zip">struts-2.0.11.2-docs.zip</a> (57mb)
- [<a href="http://www.apache.org/dist/struts/documentation/struts-2.0.11.2-docs.zip.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/struts/documentation/struts-2.0.11.2-docs.zip.md5">MD5</a>]
+ <a href="[preferred]/struts/documentation/struts-2.0.12-docs.zip">struts-2.0.12-docs.zip</a> (57mb)
+ [<a href="http://www.apache.org/dist/struts/documentation/struts-2.0.12-docs.zip.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/struts/documentation/struts-2.0.12-docs.zip.md5">MD5</a>]
</li>
</ul>
</li>
@@ -159,9 +159,9 @@
<li>Source:
<ul>
<li>
- <a href="[preferred]/struts/source/struts-2.0.11.2-src.zip">struts-2.0.11.2-src.zip</a> (22mb)
- [<a href="http://www.apache.org/dist/struts/source/struts-2.0.11.2-src.zip.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/struts/source/struts-2.0.11.2-src.zip.md5">MD5</a>]
+ <a href="[preferred]/struts/source/struts-2.0.12-src.zip">struts-2.0.12-src.zip</a> (22mb)
+ [<a href="http://www.apache.org/dist/struts/source/struts-2.0.12-src.zip.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/struts/source/struts-2.0.12-src.zip.md5">MD5</a>]
</li>
</ul>
</li>
@@ -169,9 +169,9 @@
<li>Alternative Java 4 JARs:
<ul>
<li>
- <a href="[preferred]/struts/binaries/struts-2.0.11.2-backport.zip">struts-2.0.11.2-backport.zip</a> (3mb)
- [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.11.2-backport.zip.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.11.2-backport.zip.md5">MD5</a>]
+ <a href="[preferred]/struts/binaries/struts-2.0.12-backport.zip">struts-2.0.12-backport.zip</a> (3mb)
+ [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.12-backport.zip.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/struts/binaries/struts-2.0.12-backport.zip.md5">MD5</a>]
</li>
</ul>
</li>
Modified: struts/site/src/site/xdoc/downloads.xml
URL: http://svn.apache.org/viewvc/struts/site/src/site/xdoc/downloads.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/xdoc/downloads.xml (original)
+++ struts/site/src/site/xdoc/downloads.xml Wed Oct 22 00:51:30 2008
@@ -43,8 +43,8 @@
<strong>General Availability (GA) Releases</strong> - <em>Ready for Prime Time!</em>
<ul>
<li>
- <a href="http://struts.apache.org/download.cgi#struts20112">
- Struts 2.0.11.2
+ <a href="http://struts.apache.org/download.cgi#struts2012">
+ Struts 2.0.12
</a> ("best available")
</li>
<li>
@@ -121,6 +121,9 @@
<ul>
<li>
+ <a href="http://struts.apache.org/2.0.11.2/index.html">Struts 2.0.11.2</a>
+ </li>
+ <li>
<a href="http://struts.apache.org/2.0.11.1/index.html">Struts 2.0.11.1</a>
</li>
<li>
Modified: struts/site/src/site/xdoc/index.xml
URL: http://svn.apache.org/viewvc/struts/site/src/site/xdoc/index.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/xdoc/index.xml (original)
+++ struts/site/src/site/xdoc/index.xml Wed Oct 22 00:51:30 2008
@@ -57,57 +57,27 @@
<a href="http://struts.apache.org/download.cgi#struts212">Struts 2.1.2</a>,
which was promoted to "Beta" on 26 March 2008. For the latest
production release ("General Availability"), see
- <a href="http://struts.apache.org/download.cgi#struts20112">Struts 2.0.11.2</a>.
+ <a href="http://struts.apache.org/download.cgi#struts2012">Struts 2.0.12</a>.
</p>
</subsection>
- <a name="2.0.11.2"/>
- <subsection name="30 June 2008 - Struts 2.0.11.2 General Availability Release">
+ <a name="2.0.12"/>
+ <subsection name="20 October 2008 - Struts 2.0.12 General Availability Release">
<p>
The latest release of Struts 2 is
- <a href="http://struts.apache.org/download.cgi#struts20112">Struts 2.0.11.2</a>,
- which was promoted to "General Availability" on 30 June 2008.
+ <a href="http://struts.apache.org/download.cgi#struts2012">Struts 2.0.12</a>,
+ which was promoted to "General Availability" on 20 October 2008.
</p>
<p>
- For changes included in Struts 2.0.11.2,
- see the <a href="http://struts.apache.org/2.0.11.2/docs/release-notes-20112.html">release notes</a>.
- Struts 2.0.11.2 provides important security bugfixes since the 2.0.11.1 GA release.
- </p>
- <p>
- <b>IMPORTANT ADDITIONAL NOTES:</b>
- <p/>
- There are two known issues with this release:
- <ol>
- <li>
- the integrated XWork 2.0.5 jar may cause problems when used in a combination of WebSphere 6.1 runtime environments with validation configuration via XML files.
- Possible Workarounds:
- <ul>
- <li>use annotation based validation definition instead XML based</li>
- <li>stay with Struts 2.0.11.1 including XWork 2.0.4, applying the following exclude rule to your parameter interceptor refs in struts.xml
-<pre>
-<interceptor-ref name="params">
- <param name="excludeParams">.*[[^\\p{Graph}][\\\\#:=]].*</param>
-</interceptor-ref>
-</pre>
- </li>
- </ul>
- </li>
- <li>
- the filtering mechanism implemeted in XWork's ParametersInterceptor to fix the described security issue does not completely avoid any possible malicious parameter name.
- Possible Workaround:
- <ul>
- <li>apply the following exclude rule to your parameter interceptor refs in struts.xml to avoid the usage of backslash characters in parameter names
-<pre>
-<interceptor-ref name="params">
- <param name="excludeParams">.*\\.*</param>
-</interceptor-ref>
-</pre>
- </li>
- </ul>
- </li>
- </ol>
- Both issues will be addressed in a soon upcoming XWork 2.0.6 release, followed by a new Struts 2.0 GA release including this new XWork version.
+ For changes included in Struts 2.0.12,
+ see the <a href="http://struts.apache.org/2.0.12/docs/release-notes-2012.html">release notes</a>.
+ Struts 2.0.12 provides important security and bug fixes since the 2.0.11.2 GA release.
+ For more information about the security issues, see the corresponding
+ security bulletins <a href="http://struts.apache.org/2.0.12/docs/s2-003.html">S2-003</a>
+ and <a href="http://struts.apache.org/2.0.12/docs/s2-004.html">S2-003</a>.
+ All developers are strongly advised to update existing Struts 2 applications
+ to Struts 2.0.12.
</p>
</subsection>