[CONF] Confluence Changes in the last 24 hours
Confluence Changes in the last 24 hours Apache Buildr Pages Page: March 2014 Board Report created by Alex Boisvert [03:59 PM] Apache Camel Pages Page: Download Archives edited by Christian Mueller [10:49 PM] (View Changes) Page: Camel 2.13.0 Release edited by Raúl Kripalani [07:06 PM] (View Changes) Page: Karaf edited by Grzegorz Grzybek [01:20 PM] (View Changes) Page: Delayer edited by Henryk Konsek [01:18 PM] (View Changes) Page: Mail edited by willem jiang [02:48 AM] (View Changes) Apache Cloudstack Pages Page: Inter-vlan test plan created by angie shen [11:10 PM] Page: Inter-Vlan test execution created by angie shen [11:04 PM] Page: FS - Support OVA files containing multiple disks edited by Likitha Shetty [09:06 AM] (View Changes) Page: Hyper-V support features in 4.4 edited by Rajesh Battala [06:08 AM] (View Changes) Page: Configuring load balancing rules for VM nic secondary ips edited by jayapal [05:20 AM] (View Changes) Page: Realhost IP changes created by Amogh Vasekar [01:37 AM] Apache Curator Pages Page: Submitting Pull Requests edited by Jordan Zimmerman [12:51 PM] (View Changes) Drill Wiki Pages Page: Hive Storage Engine created by Venki Korukanti [05:32 PM] Home page: Apache Drill Wiki edited by Venki Korukanti [05:33 PM] (View Changes) Page: 2014 Q1 Drill Report edited by Timothy Chen [04:23 PM] (View Changes) Apache Hive Pages Page: HowToRelease edited by Harish Butani [11:34 PM] (View Changes) Page: Hive 0.13 release status created by Harish Butani [03:16 AM] Page: LanguageManual SubQueries edited by Lefty Leverenz [05:02 AM] (View Changes) Page: Setting Up HiveServer2 edited by Lefty Leverenz [03:28 AM] (View Changes
svn commit: r1574782 - in /struts/site/trunk: ./ content/ source/
Author: lukaszlenart Date: Thu Mar 6 07:03:48 2014 New Revision: 1574782 URL: http://svn.apache.org/r1574782 Log: Updates website to match the latest version Added: struts/site/trunk/source/announce.md - copied, changed from r1570474, struts/site/trunk/source/announce.html Removed: struts/site/trunk/source/announce.html Modified: struts/site/trunk/_config.yml struts/site/trunk/content/announce-2013.html struts/site/trunk/content/announce.html struts/site/trunk/content/archetype-catalog.xml struts/site/trunk/content/download.html struts/site/trunk/content/downloads.html struts/site/trunk/content/index.html struts/site/trunk/source/downloads.html struts/site/trunk/source/index.html Modified: struts/site/trunk/_config.yml URL: http://svn.apache.org/viewvc/struts/site/trunk/_config.yml?rev=1574782&r1=1574781&r2=1574782&view=diff == --- struts/site/trunk/_config.yml (original) +++ struts/site/trunk/_config.yml Thu Mar 6 07:03:48 2014 @@ -12,5 +12,7 @@ encoding: UTF-8 root: # Simplifies introducing changes related to the latest release -current_version: 2.3.16 -current_version_short: 2316 +current_version: 2.3.16.1 +current_version_short: 23161 +release_date: 2 march 2014 +release_date_short: 20140302 Modified: struts/site/trunk/content/announce-2013.html URL: http://svn.apache.org/viewvc/struts/site/trunk/content/announce-2013.html?rev=1574782&r1=1574781&r2=1574782&view=diff == --- struts/site/trunk/content/announce-2013.html (original) +++ struts/site/trunk/content/announce-2013.html Thu Mar 6 07:03:48 2014 @@ -145,9 +145,9 @@ Struts 2.3.16 is available in a full distribution or as separate library, source, example and documentation distributions, from the - http://struts.apache.org/download.cgi#struts2316";>releases page. + http://struts.apache.org/download.cgi#struts23161";>releases page. The release is also available through the central Maven repository under Group ID "org.apache.struts". - The http://struts.apache.org/release/2.3.x/docs/version-notes-2316.html";>version notes + The http://struts.apache.org/release/2.3.x/docs/version-notes-23161.html";>version notes are available online. Modified: struts/site/trunk/content/announce.html URL: http://svn.apache.org/viewvc/struts/site/trunk/content/announce.html?rev=1574782&r1=1574781&r2=1574782&view=diff == --- struts/site/trunk/content/announce.html (original) +++ struts/site/trunk/content/announce.html Thu Mar 6 07:03:48 2014 @@ -112,46 +112,57 @@ Skip to: Announcements - 2013 -21 February 2014 - Immediately upgrade commons-fileupload to version 1.3.1 - - The Apache Struts Team recommends to immediately upgrade your Struts 2 - based projects to use the latest released version of Commons - FileUpload library, which is currently 1.3.1. This is necessary to - prevent your publicly accessible web site from being exposed to - possible DoS attacks [1] [2]. - - - Your project is affected if it uses the built-in file upload mechanism - of Struts 2, which defaults to the use of commons-fileupload. The - updated commons-fileupload library is a drop-in replacement for the - vulnerable version. Deployed applications can be hardened by replacing - the commons-fileupload jar file in WEB-INF/lib with the fixed jar. For - Maven based Struts 2 projects, the following dependency needs to be - added: - - -- - - - More details can be found here: - - - http://commons.apache.org/proper/commons-fileupload/changes-report.html#a1.3.1";> - http://commons.apache.org/proper/commons-fileupload/changes-report.html#a1.3.1 - - - http://mail-archives.apache.org/mod_mbox/www-announce/201402.mbox/%3c52f373fc.9030...@apache.org%3E";> - http://mail-archives.apache.org/mod_mbox/www-announce/201402.mbox/%3c52f373fc.9030...@apache.org%3E - - - - - All developers are strongly advised to perform this action. - + 2 March 2014 - Struts 2.3.16.1 General Availability Release - Security Fix Release + +The Apache Struts group is pleased to announce that Struts 2.3.15.2 is available as a "General Availability" +release. The GA designation is our highest quality grade. + +Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. +The framework is designed to streamline the full development cycle, from building, to deploying, +to maintaining applications over time. + +Two security issues were solved with this release: + + +http://struts.apache.org/release/2.3.x/docs/s2-020.html";>S2-020 ClassLoader manipulation +via request paramcommons-fileupload -commons-fileupload -1.3.1 -
svn commit: r900204 - in /websites/production/struts/content: announce-2013.html announce.html archetype-catalog.xml download.html downloads.html index.html
Author: lukaszlenart Date: Thu Mar 6 07:13:31 2014 New Revision: 900204 Log: Updates main site about the latest release Modified: websites/production/struts/content/announce-2013.html websites/production/struts/content/announce.html websites/production/struts/content/archetype-catalog.xml websites/production/struts/content/download.html websites/production/struts/content/downloads.html websites/production/struts/content/index.html Modified: websites/production/struts/content/announce-2013.html == --- websites/production/struts/content/announce-2013.html (original) +++ websites/production/struts/content/announce-2013.html Thu Mar 6 07:13:31 2014 @@ -145,9 +145,9 @@ Struts 2.3.16 is available in a full distribution or as separate library, source, example and documentation distributions, from the - http://struts.apache.org/download.cgi#struts2316";>releases page. + http://struts.apache.org/download.cgi#struts23161";>releases page. The release is also available through the central Maven repository under Group ID "org.apache.struts". - The http://struts.apache.org/release/2.3.x/docs/version-notes-2316.html";>version notes + The http://struts.apache.org/release/2.3.x/docs/version-notes-23161.html";>version notes are available online. Modified: websites/production/struts/content/announce.html == --- websites/production/struts/content/announce.html (original) +++ websites/production/struts/content/announce.html Thu Mar 6 07:13:31 2014 @@ -112,46 +112,57 @@ Skip to: Announcements - 2013 -21 February 2014 - Immediately upgrade commons-fileupload to version 1.3.1 - - The Apache Struts Team recommends to immediately upgrade your Struts 2 - based projects to use the latest released version of Commons - FileUpload library, which is currently 1.3.1. This is necessary to - prevent your publicly accessible web site from being exposed to - possible DoS attacks [1] [2]. - - - Your project is affected if it uses the built-in file upload mechanism - of Struts 2, which defaults to the use of commons-fileupload. The - updated commons-fileupload library is a drop-in replacement for the - vulnerable version. Deployed applications can be hardened by replacing - the commons-fileupload jar file in WEB-INF/lib with the fixed jar. For - Maven based Struts 2 projects, the following dependency needs to be - added: - - -- - - - More details can be found here: - - - http://commons.apache.org/proper/commons-fileupload/changes-report.html#a1.3.1";> - http://commons.apache.org/proper/commons-fileupload/changes-report.html#a1.3.1 - - - http://mail-archives.apache.org/mod_mbox/www-announce/201402.mbox/%3c52f373fc.9030...@apache.org%3E";> - http://mail-archives.apache.org/mod_mbox/www-announce/201402.mbox/%3c52f373fc.9030...@apache.org%3E - - - - - All developers are strongly advised to perform this action. - + 2 March 2014 - Struts 2.3.16.1 General Availability Release - Security Fix Release + +The Apache Struts group is pleased to announce that Struts 2.3.15.2 is available as a "General Availability" +release. The GA designation is our highest quality grade. + +Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. +The framework is designed to streamline the full development cycle, from building, to deploying, +to maintaining applications over time. + +Two security issues were solved with this release: + + +http://struts.apache.org/release/2.3.x/docs/s2-020.html";>S2-020 ClassLoader manipulation +via request parameters +http://struts.apache.org/release/2.3.x/docs/s2-020.html";>S2-020 Commons FileUpload library was upgraded +to version 1.3.1 to prevent DoS attacks + + +All developers are strongly advised to perform this action. + + 21 February 2014 - Immediately upgrade commons-fileupload to version 1.3.1 + +The Apache Struts Team recommends to immediately upgrade your Struts 2 +based projects to use the latest released version of Commons +FileUpload library, which is currently 1.3.1. This is necessary to +prevent your publicly accessible web site from being exposed to +possible DoS attacks (see [1] [2]). + +Your project is affected if it uses the built-in file upload mechanism +of Struts 2, which defaults to the use of commons-fileupload. The +updated commons-fileupload library is a drop-in replacement for the +vulnerable version. Deployed applications can be hardened by replacing +the commons-fileupload jar file in WEB-INF/lib with the fixed jar. For +Maven based Struts 2 projects, the following dependency needs to be +added: +commons-fileupload -commons-fileupload -1.3.1 -+ commons-fileupl
svn commit: r900203 - in /websites/production/struts/content/release/2.3.x/docs: ./ big-picture.data/ crud-demo-i.data/ home.data/ sitegraph-plugin.thumbs/ tiles-use.data/
Author: lukaszlenart Date: Thu Mar 6 07:12:30 2014 New Revision: 900203 Log: Updates release docs [This commit notification would consist of 83 parts, which exceeds the limit of 50 ones, so it was shortened to the summary.]
svn commit: r1574784 - /struts/site/trunk/content/index.html
Author: lukaszlenart Date: Thu Mar 6 07:21:44 2014 New Revision: 1574784 URL: http://svn.apache.org/r1574784 Log: Updates main page Modified: struts/site/trunk/content/index.html Modified: struts/site/trunk/content/index.html URL: http://svn.apache.org/viewvc/struts/site/trunk/content/index.html?rev=1574784&r1=1574783&r2=1574784&view=diff == --- struts/site/trunk/content/index.html (original) +++ struts/site/trunk/content/index.html Thu Mar 6 07:21:44 2014 @@ -124,8 +124,8 @@ Struts 2.3.16.1 GA - Apache Struts 2.3.16.1 GA has been released on 8 december 2013. - Read more in Announcement or in + Apache Struts 2.3.16.1 GA has been released on 2 march 2014. + Read more in Announcement or in http://struts.apache.org/release/2.3.x/docs/version-notes-23161.html";>Version notes
svn commit: r900206 - /websites/production/struts/content/index.html
Author: lukaszlenart Date: Thu Mar 6 07:23:47 2014 New Revision: 900206 Log: Updates main page Modified: websites/production/struts/content/index.html Modified: websites/production/struts/content/index.html == --- websites/production/struts/content/index.html (original) +++ websites/production/struts/content/index.html Thu Mar 6 07:23:47 2014 @@ -124,8 +124,8 @@ Struts 2.3.16.1 GA - Apache Struts 2.3.16.1 GA has been released on 8 december 2013. - Read more in Announcement or in + Apache Struts 2.3.16.1 GA has been released on 2 march 2014. + Read more in Announcement or in http://struts.apache.org/release/2.3.x/docs/version-notes-23161.html";>Version notes
