Hi all,

2014-06-16 20:27 GMT+09:00 Emmanuel Bourg <ebo...@apache.org>:
>I got confirmation from the Struts developers that a new release using
>commons-beanutils 1.9.2 is planned soon. So I'm going to prepare the
>backport of commons-beanutils 1.9.2 in stable and wait for the new
>release of Struts 1.x.

Security fix was committed over 1 month ago [1],
but not released (from upstream) yet.

So, I made a Debian fix using [1].


[1] http://svn.apache.org/r1603883


Regards,
Nobuhiro

Attachment: 745897.tar.gz
Description: GNU Zip compressed data

Reply via email to