Author: rgielen
Date: Wed Oct 22 00:51:30 2008
New Revision: 706878
URL: http://svn.apache.org/viewvc?rev=706878&view=rev
Log:
Site updates for 2.0.12 GA
Modified:
struts/site/src/site/site.xml
struts/site/src/site/xdoc/announce.xml
struts/site/src/site/xdoc/download.xml
struts/site/src/site/xdoc/downloads.xml
struts/site/src/site/xdoc/index.xml
Modified: struts/site/src/site/site.xml
URL:
http://svn.apache.org/viewvc/struts/site/src/site/site.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/site.xml (original)
+++ struts/site/src/site/site.xml Wed Oct 22 00:51:30 2008
@@ -17,7 +17,7 @@
href="http://www.apache.org/"; />
<item
name="Struts 2"
- href="http://struts.apache.org/2.0.11.2/index.html"; />
+ href="http://struts.apache.org/2.0.12/index.html"; />
<item
name="Struts 1"
href="http://struts.apache.org/1.3.8/index.html"; />
@@ -66,8 +66,8 @@
name="Struts 2.1.2 (Beta)"
href="http://struts.apache.org/2.1.2/index.html"; />
<item
- name="Struts 2.0.11.2 (GA)"
- href="http://struts.apache.org/2.0.11.2/index.html"; />
+ name="Struts 2.0.12 (GA)"
+ href="http://struts.apache.org/2.0.12/index.html"; />
<item
name="Struts 1.3.9 (Beta)"
href="http://struts.apache.org/1.3.9/index.html"; />
Modified: struts/site/src/site/xdoc/announce.xml
URL:
http://svn.apache.org/viewvc/struts/site/src/site/xdoc/announce.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/xdoc/announce.xml (original)
+++ struts/site/src/site/xdoc/announce.xml Wed Oct 22 00:51:30 2008
@@ -29,6 +29,54 @@
Skip to: <a href="announce-2007.html">Announcements - 2007</a>
</p>
+ <h4 id="a20081020">20 October 2008 - Struts 2.0.12 General
Availability Release</h4>
+ <p>
+ The Apache Struts group is pleased to announce that Struts 2.0.12
is
+ available as a "General Availability" release. The GA designation
is
+ our highest quality grade.
+ </p>
+ <p>
+ Apache Struts 2 is an elegant, extensible framework for creating
+ enterprise-ready Java web applications. The framework is designed
to
+ streamline the full development cycle, from building, to
deploying, to
+ maintaining applications over time.
+ </p>
+ <p>
+ This release includes a number of bug fixes since the
+ 2.0.11.2 GA release, including important security fixes regarding
remote
+ server context manipulation by injecting OGNL expressions in
request parameters
+ and possible server filesystem resources read access in certain
application
+ server environments. For more information about the exploits, see
the corresponding
+ security bulletins <a
href="http://struts.apache.org/2.0.12/docs/s2-003.html";>S2-003</a>
+ and <a
href="http://struts.apache.org/2.0.12/docs/s2-004.html";>S2-003</a>.
+ </p>
+ <p>
+ All developers are strongly advised to update existing Struts 2
applications
+ to Struts 2.0.12.
+ </p>
+ <p>
+ Struts 2.0.12 is available in a full distribution,
+ or as separate library, source, example and documentation
+ distributions, from the
+ <a
href="http://struts.apache.org/download.cgi#struts2012";>releases page</a>.
+ The release is also available through the central Maven repository
under Group ID
+ "org.apache.struts". The
+ <a
href="http://struts.apache.org/2.0.12/docs/release-notes-2012.html";>release
notes</a>
+ are available online.
+ </p>
+ <p>
+ The 2.0.x series of the Apache Struts framework has a minimum
+ requirement of the following specification versions: Servlet API
2.4,
+ JSP API 2.0, Java 5, Backported Java 4 JARs are also available.
+ </p>
+ <p>
+ Should any issues arise with your use of any version of the Struts
+ framework, please post your comments to the user list, and, if
+ appropriate, file a
+ <a
href="https://issues.apache.org/struts/secure/Dashboard.jspa";>tracking
ticket</a>.
+ </p>
+
+
<h4 id="a20080204">4 February 2008 - New Struts Committer Jeromy
Evans</h4>
<p>
Please join us in welcoming Jeromy Evans as a new Struts
committer.
Modified: struts/site/src/site/xdoc/download.xml
URL:
http://svn.apache.org/viewvc/struts/site/src/site/xdoc/download.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/xdoc/download.xml (original)
+++ struts/site/src/site/xdoc/download.xml Wed Oct 22 00:51:30 2008
@@ -90,30 +90,30 @@
<a name="struts-ga"/>
<section name="Full Releases">
- <a name="struts20112"/>
- <subsection name="Struts 2.0.11.2">
+ <a name="struts2012"/>
+ <subsection name="Struts 2.0.12">
<p>
- <a href="http://struts.apache.org/2.0.11.2/";>Apache Struts 2</a>
+ <a href="http://struts.apache.org/2.0.12/";>Apache Struts 2</a>
is an elegant, extensible framework
for creating enterprise-ready Java web applications.
It is available in a full distribution, or as
separate library, source, example and documentation
distributions.
- Struts 2.0.11.2 is the "best available" version of Struts.
+ Struts 2.0.12 is the "best available" version of Struts.
</p>
<ul>
<li>
- <a
href="http://struts.apache.org/2.0.11.2/docs/release-notes-20112.html";>Release
Notes</a>
+ <a
href="http://struts.apache.org/2.0.12/docs/release-notes-2012.html";>Release
Notes</a>
</li>
<li>Full Distribution:
<ul>
<li>
- <a
href="[preferred]/struts/binaries/struts-2.0.11.2-all.zip">struts-2.0.11.2-all.zip</a>
(91mb)
- [<a
href="http://www.apache.org/dist/struts/binaries/struts-2.0.11.2-all.zip.asc";>PGP</a>]
- [<a
href="http://www.apache.org/dist/struts/binaries/struts-2.0.11.2-all.zip.md5";>MD5</a>]
+ <a
href="[preferred]/struts/binaries/struts-2.0.12-all.zip">struts-2.0.12-all.zip</a>
(91mb)
+ [<a
href="http://www.apache.org/dist/struts/binaries/struts-2.0.12-all.zip.asc";>PGP</a>]
+ [<a
href="http://www.apache.org/dist/struts/binaries/struts-2.0.12-all.zip.md5";>MD5</a>]
</li>
</ul>
</li>
@@ -121,27 +121,27 @@
<li>Example Applications:
<ul>
<li>
- <a
href="[preferred]/struts/examples/struts-2.0.11.2-apps.zip">struts-2.0.11.2-apps.zip</a>
(23mb)
- [<a
href="http://www.apache.org/dist/struts/examples/struts-2.0.11.2-apps.zip.asc";>PGP</a>]
- [<a
href="http://www.apache.org/dist/struts/examples/struts-2.0.11.2-apps.zip.md5";>MD5</a>]
+ <a
href="[preferred]/struts/examples/struts-2.0.12-apps.zip">struts-2.0.12-apps.zip</a>
(23mb)
+ [<a
href="http://www.apache.org/dist/struts/examples/struts-2.0.12-apps.zip.asc";>PGP</a>]
+ [<a
href="http://www.apache.org/dist/struts/examples/struts-2.0.12-apps.zip.md5";>MD5</a>]
</li>
</ul>
</li>
<li>Blank Application only:
<ul>
<li>
- <a
href="[preferred]/struts/examples/struts2-blank-2.0.11.2.war">struts2-blank-2.0.11.2.war</a>
(Also included in apps.) (3mb)
- [<a
href="http://www.apache.org/dist/struts/examples/struts2-blank-2.0.11.2.war.asc";>PGP</a>]
- [<a
href="http://www.apache.org/dist/struts/examples/struts2-blank-2.0.11.2.war.md5";>MD5</a>]
+ <a
href="[preferred]/struts/examples/struts2-blank-2.0.12.war">struts2-blank-2.0.12.war</a>
(Also included in apps.) (3mb)
+ [<a
href="http://www.apache.org/dist/struts/examples/struts2-blank-2.0.12.war.asc";>PGP</a>]
+ [<a
href="http://www.apache.org/dist/struts/examples/struts2-blank-2.0.12.war.md5";>MD5</a>]
</li>
</ul>
</li>
<li>Essential Dependencies Only:
<ul>
<li>
- <a
href="[preferred]/struts/library/struts-2.0.11.2-lib.zip">struts-2.0.11.2-lib.zip</a>
(4mb)
- [<a
href="http://www.apache.org/dist/struts/library/struts-2.0.11.2-lib.zip.asc";>PGP</a>]
- [<a
href="http://www.apache.org/dist/struts/library/struts-2.0.11.2-lib.zip.md5";>MD5</a>]
+ <a
href="[preferred]/struts/library/struts-2.0.12-lib.zip">struts-2.0.12-lib.zip</a>
(4mb)
+ [<a
href="http://www.apache.org/dist/struts/library/struts-2.0.12-lib.zip.asc";>PGP</a>]
+ [<a
href="http://www.apache.org/dist/struts/library/struts-2.0.12-lib.zip.md5";>MD5</a>]
</li>
</ul>
</li>
@@ -149,9 +149,9 @@
<li>Documentation:
<ul>
<li>
- <a
href="[preferred]/struts/documentation/struts-2.0.11.2-docs.zip">struts-2.0.11.2-docs.zip</a>
(57mb)
- [<a
href="http://www.apache.org/dist/struts/documentation/struts-2.0.11.2-docs.zip.asc";>PGP</a>]
- [<a
href="http://www.apache.org/dist/struts/documentation/struts-2.0.11.2-docs.zip.md5";>MD5</a>]
+ <a
href="[preferred]/struts/documentation/struts-2.0.12-docs.zip">struts-2.0.12-docs.zip</a>
(57mb)
+ [<a
href="http://www.apache.org/dist/struts/documentation/struts-2.0.12-docs.zip.asc";>PGP</a>]
+ [<a
href="http://www.apache.org/dist/struts/documentation/struts-2.0.12-docs.zip.md5";>MD5</a>]
</li>
</ul>
</li>
@@ -159,9 +159,9 @@
<li>Source:
<ul>
<li>
- <a
href="[preferred]/struts/source/struts-2.0.11.2-src.zip">struts-2.0.11.2-src.zip</a>
(22mb)
- [<a
href="http://www.apache.org/dist/struts/source/struts-2.0.11.2-src.zip.asc";>PGP</a>]
- [<a
href="http://www.apache.org/dist/struts/source/struts-2.0.11.2-src.zip.md5";>MD5</a>]
+ <a
href="[preferred]/struts/source/struts-2.0.12-src.zip">struts-2.0.12-src.zip</a>
(22mb)
+ [<a
href="http://www.apache.org/dist/struts/source/struts-2.0.12-src.zip.asc";>PGP</a>]
+ [<a
href="http://www.apache.org/dist/struts/source/struts-2.0.12-src.zip.md5";>MD5</a>]
</li>
</ul>
</li>
@@ -169,9 +169,9 @@
<li>Alternative Java 4 JARs:
<ul>
<li>
- <a
href="[preferred]/struts/binaries/struts-2.0.11.2-backport.zip">struts-2.0.11.2-backport.zip</a>
(3mb)
- [<a
href="http://www.apache.org/dist/struts/binaries/struts-2.0.11.2-backport.zip.asc";>PGP</a>]
- [<a
href="http://www.apache.org/dist/struts/binaries/struts-2.0.11.2-backport.zip.md5";>MD5</a>]
+ <a
href="[preferred]/struts/binaries/struts-2.0.12-backport.zip">struts-2.0.12-backport.zip</a>
(3mb)
+ [<a
href="http://www.apache.org/dist/struts/binaries/struts-2.0.12-backport.zip.asc";>PGP</a>]
+ [<a
href="http://www.apache.org/dist/struts/binaries/struts-2.0.12-backport.zip.md5";>MD5</a>]
</li>
</ul>
</li>
Modified: struts/site/src/site/xdoc/downloads.xml
URL:
http://svn.apache.org/viewvc/struts/site/src/site/xdoc/downloads.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/xdoc/downloads.xml (original)
+++ struts/site/src/site/xdoc/downloads.xml Wed Oct 22 00:51:30 2008
@@ -43,8 +43,8 @@
<strong>General Availability (GA) Releases</strong> -
<em>Ready for Prime Time!</em>
<ul>
<li>
- <a
href="http://struts.apache.org/download.cgi#struts20112";>
- Struts 2.0.11.2
+ <a
href="http://struts.apache.org/download.cgi#struts2012";>
+ Struts 2.0.12
</a> ("best available")
</li>
<li>
@@ -121,6 +121,9 @@
<ul>
<li>
+ <a
href="http://struts.apache.org/2.0.11.2/index.html";>Struts 2.0.11.2</a>
+ </li>
+ <li>
<a
href="http://struts.apache.org/2.0.11.1/index.html";>Struts 2.0.11.1</a>
</li>
<li>
Modified: struts/site/src/site/xdoc/index.xml
URL:
http://svn.apache.org/viewvc/struts/site/src/site/xdoc/index.xml?rev=706878&r1=706877&r2=706878&view=diff
==============================================================================
--- struts/site/src/site/xdoc/index.xml (original)
+++ struts/site/src/site/xdoc/index.xml Wed Oct 22 00:51:30 2008
@@ -57,57 +57,27 @@
<a
href="http://struts.apache.org/download.cgi#struts212";>Struts 2.1.2</a>,
which was promoted to "Beta" on 26 March 2008. For the latest
production release ("General Availability"), see
- <a
href="http://struts.apache.org/download.cgi#struts20112";>Struts 2.0.11.2</a>.
+ <a
href="http://struts.apache.org/download.cgi#struts2012";>Struts 2.0.12</a>.
</p>
</subsection>
- <a name="2.0.11.2"/>
- <subsection name="30 June 2008 - Struts 2.0.11.2 General
Availability Release">
+ <a name="2.0.12"/>
+ <subsection name="20 October 2008 - Struts 2.0.12 General
Availability Release">
<p>
The latest release of Struts 2 is
- <a
href="http://struts.apache.org/download.cgi#struts20112";>Struts 2.0.11.2</a>,
- which was promoted to "General Availability" on 30 June 2008.
+ <a
href="http://struts.apache.org/download.cgi#struts2012";>Struts 2.0.12</a>,
+ which was promoted to "General Availability" on 20 October
2008.
</p>
<p>
- For changes included in Struts 2.0.11.2,
- see the <a
href="http://struts.apache.org/2.0.11.2/docs/release-notes-20112.html";>release
notes</a>.
- Struts 2.0.11.2 provides important security bugfixes since the
2.0.11.1 GA release.
- </p>
- <p>
- <b>IMPORTANT ADDITIONAL NOTES:</b>
- <p/>
- There are two known issues with this release:
- <ol>
- <li>
- the integrated XWork 2.0.5 jar may cause problems when
used in a combination of WebSphere 6.1 runtime environments with validation
configuration via XML files.
- Possible Workarounds:
- <ul>
- <li>use annotation based validation definition
instead XML based</li>
- <li>stay with Struts 2.0.11.1 including XWork
2.0.4, applying the following exclude rule to your parameter interceptor refs
in struts.xml
-<pre>
-<interceptor-ref name="params">
- <param
name="excludeParams">.*[[^\\p{Graph}][\\\\#:=]].*</param>
-</interceptor-ref>
-</pre>
- </li>
- </ul>
- </li>
- <li>
- the filtering mechanism implemeted in XWork's
ParametersInterceptor to fix the described security issue does not completely
avoid any possible malicious parameter name.
- Possible Workaround:
- <ul>
- <li>apply the following exclude rule to your
parameter interceptor refs in struts.xml to avoid the usage of backslash
characters in parameter names
-<pre>
-<interceptor-ref name="params">
- <param name="excludeParams">.*\\.*</param>
-</interceptor-ref>
-</pre>
- </li>
- </ul>
- </li>
- </ol>
- Both issues will be addressed in a soon upcoming XWork 2.0.6
release, followed by a new Struts 2.0 GA release including this new XWork
version.
+ For changes included in Struts 2.0.12,
+ see the <a
href="http://struts.apache.org/2.0.12/docs/release-notes-2012.html";>release
notes</a>.
+ Struts 2.0.12 provides important security and bug fixes since
the 2.0.11.2 GA release.
+ For more information about the security issues, see the
corresponding
+ security bulletins <a
href="http://struts.apache.org/2.0.12/docs/s2-003.html";>S2-003</a>
+ and <a
href="http://struts.apache.org/2.0.12/docs/s2-004.html";>S2-003</a>.
+ All developers are strongly advised to update existing Struts
2 applications
+ to Struts 2.0.12.
</p>
</subsection>
