You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@struts.apache.org by Lukasz Lenart <lu...@apache.org> on 2016/07/14 07:34:37 UTC

Re: [CLOSED][VOTE] Struts 2.3.30

Vote passed with result:

+1 (binding) x 5
+1 (non-binding) x 2

Thank y'all :)
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

2016-07-12 7:37 GMT+02:00 Lukasz Lenart <lu...@apache.org>:
> The Apache Struts 2.3.30 test build is now available. With this release:
>
> [WW-4641] - CVE-2016-0785
> [WW-4642] - Unable to retrieve s:hidden field values
> [WW-4645] - SecurityMemberAccess exclude class design issue
> [WW-4651] - Negative number is considered an arithmetic expression
> [WW-4648] - Upgrade commons-fileupload to the latest version
>
> also this version uses the latest OGNL 3.0.x series which doesn't
> allow modify `_memeberAccess` via a key plus doesn't treat negative
> numbers as an expression
> https://github.com/jkuhnert/ognl#release-notes---version-3110-3019
>
> Release notes
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.30
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.3.30/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org