Re: Roller release to upgrade to struts 2.5.17?

Dave <[email protected]> Sun, 26 Aug 2018 23:26:41 -0400

Newsgroups	gmane.comp.java.roller.user
Message-ID	<CAF1aazD_CVB85Yb5Q=Q8zArA3vEKCbpqe1BZTVpDgzxtKKcvFQ@mail.gmail.com>

Hi Sean,

Thanks for the note. I had not heard about this vulnerability until now.
I'll take a look at Struts 2.5.17 this weekend and, hopefully, put together
a release candidate that updates this dependency.

Dave

On Sun, Aug 26, 2018 at 4:12 PM Sean Pritchard <[email protected]>
wrote:

> Hi,
>
> A new version of struts was just released to address a critical
> vulnerability:
> https://cwiki.apache.org/confluence/display/WW/S2-057
>
> Does anyone know whether a new version of roller will be released soon to
> include Struts 2.5.17?  Or should I plan to build from source if I want the
> newer struts version?
>
> Thanks,
> Sean
>