You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@struts.apache.org by rg...@apache.org on 2013/05/26 23:48:59 UTC
svn commit: r1486480 - in /struts/site/trunk/content:
resources/archetype-catalog.xml site.xml xdoc/announce.xml
xdoc/download.xml xdoc/index.xml
Author: rgielen
Date: Sun May 26 21:48:59 2013
New Revision: 1486480
URL: http://svn.apache.org/r1486480
Log:
2.3.14.2 release site updates
Modified:
struts/site/trunk/content/resources/archetype-catalog.xml
struts/site/trunk/content/site.xml
struts/site/trunk/content/xdoc/announce.xml
struts/site/trunk/content/xdoc/download.xml
struts/site/trunk/content/xdoc/index.xml
Modified: struts/site/trunk/content/resources/archetype-catalog.xml
URL: http://svn.apache.org/viewvc/struts/site/trunk/content/resources/archetype-catalog.xml?rev=1486480&r1=1486479&r2=1486480&view=diff
==============================================================================
--- struts/site/trunk/content/resources/archetype-catalog.xml (original)
+++ struts/site/trunk/content/resources/archetype-catalog.xml Sun May 26 21:48:59 2013
@@ -7,42 +7,42 @@
<archetype>
<groupId>org.apache.struts</groupId>
<artifactId>struts2-archetype-blank</artifactId>
- <version>2.3.14.1</version>
+ <version>2.3.14.2</version>
<repository>https://repository.apache.org/content/groups/public/</repository>
<description>Struts 2 Archetypes - Blank</description>
</archetype>
<archetype>
<groupId>org.apache.struts</groupId>
<artifactId>struts2-archetype-convention</artifactId>
- <version>2.3.14.1</version>
+ <version>2.3.14.2</version>
<repository>https://repository.apache.org/content/groups/public/</repository>
<description>Struts 2 Archetypes - Blank Convention</description>
</archetype>
<archetype>
<groupId>org.apache.struts</groupId>
<artifactId>struts2-archetype-dbportlet</artifactId>
- <version>2.3.14.1</version>
+ <version>2.3.14.2</version>
<repository>https://repository.apache.org/content/groups/public/</repository>
<description>Struts 2 Archetypes - Database Portlet</description>
</archetype>
<archetype>
<groupId>org.apache.struts</groupId>
<artifactId>struts2-archetype-plugin</artifactId>
- <version>2.3.14.1</version>
+ <version>2.3.14.2</version>
<repository>https://repository.apache.org/content/groups/public/</repository>
<description>Struts 2 Archetypes - Plugin</description>
</archetype>
<archetype>
<groupId>org.apache.struts</groupId>
<artifactId>struts2-archetype-portlet</artifactId>
- <version>2.3.14.1</version>
+ <version>2.3.14.2</version>
<repository>https://repository.apache.org/content/groups/public/</repository>
<description>Struts 2 Archetypes - Portlet</description>
</archetype>
<archetype>
<groupId>org.apache.struts</groupId>
<artifactId>struts2-archetype-starter</artifactId>
- <version>2.3.14.1</version>
+ <version>2.3.14.2</version>
<repository>https://repository.apache.org/content/groups/public/</repository>
<description>Struts 2 Archetypes - Starter</description>
</archetype>
Modified: struts/site/trunk/content/site.xml
URL: http://svn.apache.org/viewvc/struts/site/trunk/content/site.xml?rev=1486480&r1=1486479&r2=1486480&view=diff
==============================================================================
--- struts/site/trunk/content/site.xml (original)
+++ struts/site/trunk/content/site.xml Sun May 26 21:48:59 2013
@@ -84,7 +84,7 @@
name="Key Technologies"
href="primer.html" />
<item
- name="Struts 2.3.14.1 (GA)"
+ name="Struts 2.3.14.2 (GA)"
href="http://struts.apache.org/release/2.3.x/index.html" />
<item
name="Struts 1.3.10 (GA) - EOL"
Modified: struts/site/trunk/content/xdoc/announce.xml
URL: http://svn.apache.org/viewvc/struts/site/trunk/content/xdoc/announce.xml?rev=1486480&r1=1486479&r2=1486480&view=diff
==============================================================================
--- struts/site/trunk/content/xdoc/announce.xml (original)
+++ struts/site/trunk/content/xdoc/announce.xml Sun May 26 21:48:59 2013
@@ -30,6 +30,47 @@ limitations under the License.
<a href="announce-2012.html">Announcements - 2012</a>
</p>
+ <h4 id="a20130526">26 May 2013 - Struts 2.3.14.2 General Availability Release - Security Fix Release</h4>
+ <p>
+ The Apache Struts group is pleased to announce that Struts 2.3.14.2 is
+ available as a "General Availability" release. The GA designation is our
+ highest quality grade.
+ </p>
+ <p>
+ Apache Struts 2 is an elegant, extensible framework for creating
+ enterprise-ready Java web applications. The framework is designed to
+ streamline the full development cycle, from building, to deploying, to
+ maintaining applications over time.
+ </p>
+ <p>
+ A highly critical security vulnerability was resolved in this release:
+ <ul>
+ <li>
+ <a href="http://struts.apache.org/release/2.3.x/docs/s2-014.html">S2-014</a> - A vulnerability introduced by forcing parameter inclusion in the URL and Anchor Tag allows remote command execution, session access and manipulation and XSS attacks
+ </li>
+ </ul>
+ </p>
+ <p>
+ <strong>All developers are strongly advised to update existing Struts 2 applications to Struts 2.3.14.1 immediately.</strong>
+ </p>
+ <p>
+ Struts 2.3.14.2 is available in a full distribution or as separate library, source, example and documentation distributions, from the
+ <a href="http://struts.apache.org/download.cgi#struts23142">releases page</a>.
+ The release is also available through the central Maven repository under Group ID "org.apache.struts". The
+ <a href="http://struts.apache.org/release/2.3.x/docs/version-notes-23142.html">release notes</a>
+ are available online.
+ </p>
+ <p>
+ The 2.3.x series of the Apache Struts framework has a minimum
+ requirement of the following specification versions: Servlet API 2.4,
+ JSP API 2.0, and Java 5.
+ </p>
+ <p>
+ Should any issues arise with your use of any version of the Struts
+ framework, please post your comments to the user list, and, if
+ appropriate, file a tracking ticket.
+ </p>
+
<h4 id="a20130522">22 May 2013 - Struts 2.3.14.1 General Availability Release</h4>
<p>
The Apache Struts group is pleased to announce that Struts 2.3.14.1 is
Modified: struts/site/trunk/content/xdoc/download.xml
URL: http://svn.apache.org/viewvc/struts/site/trunk/content/xdoc/download.xml?rev=1486480&r1=1486479&r2=1486480&view=diff
==============================================================================
--- struts/site/trunk/content/xdoc/download.xml (original)
+++ struts/site/trunk/content/xdoc/download.xml Sun May 26 21:48:59 2013
@@ -107,11 +107,7 @@ limitations under the License.
<ul>
<li>
- <a href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.14.2">Version Notes</a>
-<!--
- Should be used when docs publishing is done
<a href="http://struts.apache.org/development/2.x/docs/version-notes-23142.html">Version Notes</a>
--->
</li>
<li>Full Distribution:
Modified: struts/site/trunk/content/xdoc/index.xml
URL: http://svn.apache.org/viewvc/struts/site/trunk/content/xdoc/index.xml?rev=1486480&r1=1486479&r2=1486480&view=diff
==============================================================================
--- struts/site/trunk/content/xdoc/index.xml (original)
+++ struts/site/trunk/content/xdoc/index.xml Sun May 26 21:48:59 2013
@@ -30,13 +30,15 @@ limitations under the License.
<body>
<div class="hero-unit">
- <h1>Apache Struts 2.3.14.1 GA</h1>
+ <h1>Apache Struts 2.3.14.2 GA</h1>
<p>
- Released on 22 May 2013. The <a href="http://struts.apache.org/development/2.x/docs/version-notes-23141.html">version notes</a>
+ Released on 26 May 2013.
+ <strong>This is an important security fix release, please read <a href="http://struts.apache.org/release/2.3.x/docs/s2-014.html">Security Bulletin S2-014</a></strong>
+ The <a href="http://struts.apache.org/release/2.3.x/docs/version-notes-23142.html">version notes</a>
are available online. Scroll down for more about <a href="#Welcome">Apache Struts</a>,
the <a href="#Project">Apache Struts project</a>, and <a href="#Newbies">Struts for Newbies</a>
</p>
- <a href="http://struts.apache.org/download.cgi#struts23141" class="btn btn-primary">Download</a>
+ <a href="http://struts.apache.org/download.cgi#struts23142" class="btn btn-primary">Download</a>
<a href="primer.html" class="btn btn-info">Read more</a>
<h1>Apache Struts 1 End-Of-Life (EOL)</h1>