This is an automated email from the ASF dual-hosted git repository.
git-site-role pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/struts-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new 85d3a2c Updates production by Jenkins
85d3a2c is described below
commit 85d3a2c9903bff2f04cc935a749ac180861a059e
Author: jenkins <[email protected]>
AuthorDate: Mon Oct 15 07:00:49 2018 +0000
Updates production by Jenkins
---
content/announce.html | 26 +++++++++++++++++++++++++
content/download.html | 54 +++++++++++++++++++++++++--------------------------
content/index.html | 8 ++++----
content/releases.html | 11 +++++++++++
4 files changed, 68 insertions(+), 31 deletions(-)
diff --git a/content/announce.html b/content/announce.html
index f912bad..ea06c3f 100644
--- a/content/announce.html
+++ b/content/announce.html
@@ -130,6 +130,7 @@
<h1 class="no_toc" id="announcements-2018">Announcements 2018</h1>
<ul id="markdown-toc">
+ <li><a href="#a20181015-2" id="markdown-toc-a20181015-2">15 October 2018 -
Struts 2.3.36 General Availability</a></li>
<li><a href="#a20181015-1" id="markdown-toc-a20181015-1">15 October 2018 -
Struts 2.5.18 General Availability</a></li>
<li><a href="#a20180822-0" id="markdown-toc-a20180822-0">22 August 2018 -
CVE-2018-11776 Apache Struts 2.3 to 2.3.34 and 2.5 to 2.5.16</a></li>
<li><a href="#a20180822-1" id="markdown-toc-a20180822-1">22 August 2018 -
Struts 2.5.17 General Availability</a></li>
@@ -143,6 +144,31 @@
Skip to: <a href="announce-2017.html">Announcements - 2017</a>
</p>
+<h4 id="a20181015-2">15 October 2018 - Struts 2.3.36 General Availability</h4>
+
+<p>The Apache Struts group is pleased to announce that Struts 2.3.36 is
available as a “General Availability”
+release. The GA designation is our highest quality grade.</p>
+
+<p>This release addresses one backward compatibility issue:</p>
+
+<ul>
+ <li><a
href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.36">xml-validation
fails since struts 2.5.17</a></li>
+</ul>
+
+<p>Apache Struts 2 is an elegant, extensible framework for creating
enterprise-ready Java web applications.
+The framework is designed to streamline the full development cycle, from
building, to deploying,
+to maintaining applications over time.</p>
+
+<p><strong>All developers are strongly advised to perform this
action.</strong></p>
+
+<p>The 2.3.x series of the Apache Struts framework has a minimum requirement
of the following specification versions:
+Servlet API 2.4, JSP API 2.0, and Java 6.</p>
+
+<p>Should any issues arise with your use of any version of the Struts
framework, please post your comments
+to the user list, and, if appropriate, file a tracking ticket.</p>
+
+<p>You can download this version from our <a
href="download.cgi#struts-23x">download</a> page.</p>
+
<h4 id="a20181015-1">15 October 2018 - Struts 2.5.18 General Availability</h4>
<p>The Apache Struts group is pleased to announce that Struts 2.5.18 is
available as a “General Availability”
diff --git a/content/download.html b/content/download.html
index 2e92ec7..f010df2 100644
--- a/content/download.html
+++ b/content/download.html
@@ -208,7 +208,7 @@
<li>
<a
href="[preferred]struts/2.5.18/struts-2.5.18-all.zip">struts-2.5.18-all.zip</a>
(65MB)
[<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-all.zip.asc">PGP</a>]
- [<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-all.zip.md5">MD5</a>]
+ [<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-all.zip.sha256">SHA256</a>]
</li>
</ul>
</li>
@@ -218,7 +218,7 @@
<li>
<a
href="[preferred]struts/2.5.18/struts-2.5.18-apps.zip">struts-2.5.18-apps.zip</a>
(35MB)
[<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-apps.zip.asc">PGP</a>]
- [<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-apps.zip.md5">MD5</a>]
+ [<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-apps.zip.sha256">SHA256</a>]
</li>
</ul>
</li>
@@ -228,7 +228,7 @@
<li>
<a
href="[preferred]struts/2.5.18/struts-2.5.18-min-lib.zip">struts-2.5.18-min-lib.zip</a>
(4MB)
[<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-min-lib.zip.asc">PGP</a>]
- [<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-min-lib.zip.md5">MD5</a>]
+ [<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-min-lib.zip.sha256">SHA256</a>]
</li>
</ul>
</li>
@@ -238,7 +238,7 @@
<li>
<a
href="[preferred]struts/2.5.18/struts-2.5.18-lib.zip">struts-2.5.18-lib.zip</a>
(19MB)
[<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-lib.zip.asc">PGP</a>]
- [<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-lib.zip.md5">MD5</a>]
+ [<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-lib.zip.sha256">SHA256</a>]
</li>
</ul>
</li>
@@ -248,7 +248,7 @@
<li>
<a
href="[preferred]struts/2.5.18/struts-2.5.18-docs.zip">struts-2.5.18-docs.zip</a>
(13MB)
[<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-docs.zip.asc">PGP</a>]
- [<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-docs.zip.md5">MD5</a>]
+ [<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-docs.zip.sha256">SHA256</a>]
</li>
</ul>
</li>
@@ -258,26 +258,26 @@
<li>
<a
href="[preferred]struts/2.5.18/struts-2.5.18-src.zip">struts-2.5.18-src.zip</a>
(7MB)
[<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-src.zip.asc">PGP</a>]
- [<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-src.zip.md5">MD5</a>]
+ [<a
href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-src.zip.sha256">SHA256</a>]
</li>
</ul>
</li>
</ul>
-<h3 id="struts-23x">Struts 2.3.35</h3>
+<h3 id="struts-23x">Struts 2.3.36</h3>
<ul>
<li>
- <a
href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.35">Version
Notes</a>
+ <a
href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.36">Version
Notes</a>
</li>
<li>Full Distribution:
<ul>
<li>
- <a
href="[preferred]struts/2.3.35/struts-2.3.35-all.zip">struts-2.3.35-all.zip</a>
(65MB)
- [<a
href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-all.zip.asc">PGP</a>]
- [<a
href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-all.zip.md5">MD5</a>]
+ <a
href="[preferred]struts/2.3.36/struts-2.3.36-all.zip">struts-2.3.36-all.zip</a>
(65MB)
+ [<a
href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-all.zip.asc">PGP</a>]
+ [<a
href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-all.zip.sha256">SHA256</a>]
</li>
</ul>
</li>
@@ -285,9 +285,9 @@
<li>Example Applications:
<ul>
<li>
- <a
href="[preferred]struts/2.3.35/struts-2.3.35-apps.zip">struts-2.3.35-apps.zip</a>
(35MB)
- [<a
href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-apps.zip.asc">PGP</a>]
- [<a
href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-apps.zip.md5">MD5</a>]
+ <a
href="[preferred]struts/2.3.36/struts-2.3.36-apps.zip">struts-2.3.36-apps.zip</a>
(35MB)
+ [<a
href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-apps.zip.asc">PGP</a>]
+ [<a
href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-apps.zip.sha256">SHA256</a>]
</li>
</ul>
</li>
@@ -295,9 +295,9 @@
<li>Essential Dependencies Only:
<ul>
<li>
- <a
href="[preferred]struts/2.3.35/struts-2.3.35-min-lib.zip">struts-2.3.35-min-lib.zip</a>
(4MB)
- [<a
href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-min-lib.zip.asc">PGP</a>]
- [<a
href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-min-lib.zip.md5">MD5</a>]
+ <a
href="[preferred]struts/2.3.36/struts-2.3.36-min-lib.zip">struts-2.3.36-min-lib.zip</a>
(4MB)
+ [<a
href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-min-lib.zip.asc">PGP</a>]
+ [<a
href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-min-lib.zip.sha256">SHA256</a>]
</li>
</ul>
</li>
@@ -305,9 +305,9 @@
<li>All Dependencies:
<ul>
<li>
- <a
href="[preferred]struts/2.3.35/struts-2.3.35-lib.zip">struts-2.3.35-lib.zip</a>
(19MB)
- [<a
href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-lib.zip.asc">PGP</a>]
- [<a
href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-lib.zip.md5">MD5</a>]
+ <a
href="[preferred]struts/2.3.36/struts-2.3.36-lib.zip">struts-2.3.36-lib.zip</a>
(19MB)
+ [<a
href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-lib.zip.asc">PGP</a>]
+ [<a
href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-lib.zip.sha256">SHA256</a>]
</li>
</ul>
</li>
@@ -315,9 +315,9 @@
<li>Documentation:
<ul>
<li>
- <a
href="[preferred]struts/2.3.35/struts-2.3.35-docs.zip">struts-2.3.35-docs.zip</a>
(13MB)
- [<a
href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-docs.zip.asc">PGP</a>]
- [<a
href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-docs.zip.md5">MD5</a>]
+ <a
href="[preferred]struts/2.3.36/struts-2.3.36-docs.zip">struts-2.3.36-docs.zip</a>
(13MB)
+ [<a
href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-docs.zip.asc">PGP</a>]
+ [<a
href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-docs.zip.sha256">SHA256</a>]
</li>
</ul>
</li>
@@ -325,9 +325,9 @@
<li>Source:
<ul>
<li>
- <a
href="[preferred]struts/2.3.35/struts-2.3.35-src.zip">struts-2.3.35-src.zip</a>
(7MB)
- [<a
href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-src.zip.asc">PGP</a>]
- [<a
href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-src.zip.md5">MD5</a>]
+ <a
href="[preferred]struts/2.3.36/struts-2.3.36-src.zip">struts-2.3.36-src.zip</a>
(7MB)
+ [<a
href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-src.zip.asc">PGP</a>]
+ [<a
href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-src.zip.sha256">SHA256</a>]
</li>
</ul>
</li>
@@ -475,7 +475,7 @@
<h2 id="verify">Verify the integrity of the files</h2>
<p>
- We recommend that you verify the integrity of the downloaded files using the
PGP or MD5 signatures.
+ We recommend that you verify the integrity of the downloaded files using the
PGP or MD5/SHA256 signatures.
</p>
<p>
diff --git a/content/index.html b/content/index.html
index 1c114c8..f88e773 100644
--- a/content/index.html
+++ b/content/index.html
@@ -159,11 +159,11 @@
<a
href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.18">Version
notes</a>
</div>
<div class="column col-md-4">
- <h2>Apache Struts 2.3.35 GA</h2>
+ <h2>Apache Struts 2.3.36 GA</h2>
<p>
It's the latest release of Struts 2.3.x which contains the latest
security fixes,
- released on 22 August 2018.<br/> Read more in <a
href="announce.html#a20180822-2">Announcement</a> or in
- <a
href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.35">Version
notes</a>
+ released on 15 October 2018.<br/> Read more in <a
href="announce.html#a20181015-2">Announcement</a> or in
+ <a
href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.36">Version
notes</a>
</p>
</div>
</div>
@@ -187,7 +187,7 @@
</p>
</div>
<div class="column col-md-4">
- <h2>Immediately upgrade to version 2.5.18 or 2.3.35</h2>
+ <h2>Immediately upgrade to version 2.5.18 or 2.3.36</h2>
<p>
The Apache Security Struts Team recommends to immediately upgrade
your Struts 2 based projects to use
the latest released version of the Apache Struts to prevent possible
RCE attack when using results with no namespace,
diff --git a/content/releases.html b/content/releases.html
index 7d75eeb..1163aa0 100644
--- a/content/releases.html
+++ b/content/releases.html
@@ -242,6 +242,17 @@
</tr>
<tr>
<td class="no-wrap">
+ Struts 2.3.35
+ </td>
+ <td class="no-wrap">22 August 2018</td>
+ <td>
+ </td>
+ <td>
+ <a
href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.35">Version
notes</a>
+ </td>
+ </tr>
+ <tr>
+ <td class="no-wrap">
Struts 2.5.16
</td>
<td class="no-wrap">16 March 2018</td>