| --- |
| layout: default |
| title: Announcements 2011 |
| --- |
| |
| <h1>Announcements - 2011</h1> |
| |
| <p class="pull-right"> |
| Skip to: <a href="announce-2010.html">Announcements - 2010</a> |
| </p> |
| |
| <h4 id="a20111225">25 December 2011 - Struts 2.3.1.1 General Availability Release</h4> |
| <p> |
| The Apache Struts group is pleased to announce that Struts 2.3.1.1 is |
| available as a "General Availability" release. The GA designation is our |
| highest quality grade. |
| </p> |
| <p> |
| Apache Struts 2 is an elegant, extensible framework for creating |
| enterprise-ready Java web applications. The framework is designed to |
| streamline the full development cycle, from building, to deploying, to |
| maintaining applications over time. |
| </p> |
| <p> |
| An important vulnerability were solved with this release: |
| <ul> |
| <li> |
| Remote command execution and arbitrary file overwrite |
| </li> |
| <li> |
| Strict DMI mode does not work correctly |
| </li> |
| </ul> |
| </p> |
| <p> |
| All developers are strongly advised to update existing Struts 2 applications |
| to Struts 2.3.1.1. |
| </p> |
| <p> |
| Struts 2.3.1.1 is available in a full distribution, |
| or as separate library, source, example and documentation |
| distributions, from the |
| <a href="http://struts.apache.org/download.cgi#struts2311">releases page</a>. |
| The release is also available through the central Maven repository under Group ID |
| "org.apache.struts". The |
| <a href="http://struts.apache.org/docs/version-notes-2311.html">release notes</a> |
| are available online. |
| </p> |
| <p> |
| The 2.3.x series of the Apache Struts framework has a minimum |
| requirement of the following specification versions: Servlet API 2.4, |
| JSP API 2.0, and Java 5. |
| </p> |
| <p> |
| Should any issues arise with your use of any version of the Struts |
| framework, please post your comments to the user list, and, if |
| appropriate, file a tracking ticket. |
| </p> |
| |
| <h4 id="a20111218">18 December 2011 - Struts 2.0.14 End of Life Announcement</h4> |
| <p> |
| The Apache Struts Team likes to inform you that the Struts 2.0 branch has reached it's end of life |
| and is no longer supported. All users of Struts 2.0.14 or earlier Struts 2 versions are strongly |
| advised to update their existing applications to Struts 2.3.x. |
| </p> |
| <p> |
| Struts 2.0.14 was for some time maintained in parallel to the 2.1 and 2.2 branches, since Struts 2.1 |
| introduced some API and plugin changes that were likely to break existing user code on top of Struts 2. |
| However, the community interest in maintaining the Struts 2.0.x branch was not strong enough to |
| keep it sufficiently up to date, especially in terms of security fixes. There are several serious |
| security problems that, while being continuously addressed in later Struts 2 versions, did not make |
| it into the 2.0.x branch. For that reason the Apache Struts PMC decided to remove 2.0.14 as a supported |
| version. |
| </p> |
| <p> |
| For more information on how to upgrade existing applications running on top of Struts 2.0.x to |
| Struts 2.1 and later, please read the |
| <a href="https://cwiki.apache.org/confluence/display/S2WIKI/Troubleshooting+guide+migrating+from+Struts+2.0.x+to+2.1.x"> |
| Guide to migrating from Struts 2.0.x to 2.1.x</a>. |
| </p> |
| |
| |
| <h4 id="a20111212">12 December 2011 - Struts 2.3.1 General Availability Release</h4> |
| <p> |
| The Apache Struts group is pleased to announce that Struts 2.3.1 is |
| available as a "General Availability" release. The GA designation is our |
| highest quality grade. |
| </p> |
| <p> |
| Apache Struts 2 is an elegant, extensible framework for creating |
| enterprise-ready Java web applications. The framework is designed to |
| streamline the full development cycle, from building, to deploying, to |
| maintaining applications over time. |
| </p> |
| <p> |
| Some new futures are: |
| <ul> |
| <li> |
| New Portlet 2.0 (JSR 286) plugin replaced the Portlet 1.0 (JSR 168) plugin |
| </li> |
| <li> |
| New CDI plugin was added to allow use CDI (JavaEE 6) as an Object Factory in Struts 2 |
| </li> |
| <li> |
| The dependencies of the Struts2-Spring plugin were upgraded from Spring 2.5 to 3.0 |
| </li> |
| </ul> |
| Besides that, various other bug fixes, improvements and security enhancements have been incorporated. |
| </p> |
| <p> |
| All developers are strongly advised to update existing Struts 2 applications |
| to Struts 2.3.1. |
| </p> |
| <p> |
| Struts 2.3.1 is available in a full distribution, |
| or as separate library, source, example and documentation |
| distributions, from the |
| <a href="http://struts.apache.org/download.cgi#struts231">releases page</a>. |
| The release is also available through the central Maven repository under Group ID |
| "org.apache.struts". The |
| <a href="http://struts.apache.org/2.3.1/docs/version-notes-231.html">release notes</a> |
| are available online. |
| </p> |
| <p> |
| The 2.3.x series of the Apache Struts framework has a minimum |
| requirement of the following specification versions: Servlet API 2.4, |
| JSP API 2.0, and Java 5. |
| </p> |
| <p> |
| Should any issues arise with your use of any version of the Struts |
| framework, please post your comments to the user list, and, if |
| appropriate, file a tracking ticket. |
| </p> |
| |
| <h4 id="a20111007">7 September 2011 - Struts 2.2.3.1 General Availability Release</h4> |
| <p> |
| The Apache Struts group is pleased to announce that Struts 2.2.3.1 is |
| available as a "General Availability" release. The GA designation is our |
| highest quality grade. |
| </p> |
| <p> |
| Apache Struts 2 is an elegant, extensible framework for creating |
| enterprise-ready Java web applications. The framework is designed to |
| streamline the full development cycle, from building, to deploying, to |
| maintaining applications over time. |
| </p> |
| <p> |
| An important vulnerability were solved with this release: |
| <ul> |
| <li> |
| User input was evaluated as an OGNL expression when there's a conversion error. |
| </li> |
| </ul> |
| </p> |
| <p> |
| All developers are strongly advised to update existing Struts 2 applications |
| to Struts 2.2.3.1. |
| </p> |
| <p> |
| Struts 2.2.3.1 is available in a full distribution, |
| or as separate library, source, example and documentation |
| distributions, from the |
| <a href="http://struts.apache.org/download.cgi#struts2231">releases page</a>. |
| The release is also available through the central Maven repository under Group ID |
| "org.apache.struts". The |
| <a href="http://struts.apache.org/2.2.3.1/docs/version-notes-2231.html">release notes</a> |
| are available online. |
| </p> |
| <p> |
| The 2.2.x series of the Apache Struts framework has a minimum |
| requirement of the following specification versions: Servlet API 2.4, |
| JSP API 2.0, and Java 5. |
| </p> |
| <p> |
| Should any issues arise with your use of any version of the Struts |
| framework, please post your comments to the user list, and, if |
| appropriate, file a tracking ticket. |
| </p> |
| |
| <p class="pull-right"> |
| Skip to: <a href="announce-2010.html">Announcements - 2010</a> |
| </p> |
| |
| <p class="pull-left"> |
| <strong>Next:</strong> |
| <a href="kickstart.html">Kickstart FAQ</a> |
| </p> |