blob: 290ef2573a3ffd11c77ffe5fc765086bc666fe9b [file] [log] [blame]
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1.0"/>
<meta name="Date-Revision-yyyymmdd" content="20140918"/>
<meta http-equiv="Content-Language" content="en"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<title>Announcements 2011</title>
<link href="//fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,700,400italic,600italic,700italic" rel="stylesheet" type="text/css">
<link href="//netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css" rel="stylesheet">
<link href="/css/main.css" rel="stylesheet">
<link href="/css/custom.css" rel="stylesheet">
<link href="/css/syntax.css" rel="stylesheet">
<script src="//code.jquery.com/jquery-1.11.0.min.js"></script>
<script type="text/javascript" src="/bootstrap/js/bootstrap.js"></script>
<script type="text/javascript" src="/js/community.js"></script>
<!-- Matomo -->
<script>
var _paq = window._paq = window._paq || [];
/* tracker methods like "setCustomDimension" should be called before "trackPageView" */
/* We explicitly disable cookie tracking to avoid privacy issues */
_paq.push(['disableCookies']);
_paq.push(['trackPageView']);
_paq.push(['enableLinkTracking']);
(function() {
var u="//analytics.apache.org/";
_paq.push(['setTrackerUrl', u+'matomo.php']);
_paq.push(['setSiteId', '41']);
var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];
g.async=true; g.src=u+'matomo.js'; s.parentNode.insertBefore(g,s);
})();
</script>
<!-- End Matomo Code -->
</head>
<body>
<a href="https://github.com/apache/struts" class="github-ribbon">
<img decoding="async" loading="lazy" style="position: absolute; right: 0; border: 0;" width="149" height="149" src="https://github.blog/wp-content/uploads/2008/12/forkme_right_red_aa0000.png?resize=149%2C149" class="attachment-full size-full" alt="Fork me on GitHub" data-recalc-dims="1">
</a>
<header>
<nav>
<div role="navigation" class="navbar navbar-default navbar-fixed-top">
<div class="container">
<div class="navbar-header">
<button type="button" data-toggle="collapse" data-target="#struts-menu" class="navbar-toggle">
Menu
<span class="sr-only">Toggle navigation</span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
</button>
<a href="/index.html" class="navbar-brand logo"><img src="/img/struts-logo.svg"></a>
</div>
<div id="struts-menu" class="navbar-collapse collapse">
<ul class="nav navbar-nav">
<li class="dropdown">
<a data-toggle="dropdown" href="#" class="dropdown-toggle">
Home<b class="caret"></b>
</a>
<ul class="dropdown-menu">
<li><a href="/index.html">Welcome</a></li>
<li><a href="/download.cgi">Download</a></li>
<li><a href="/releases.html">Releases</a></li>
<li><a href="/announce-2024.html">Announcements</a></li>
<li><a href="http://www.apache.org/licenses/">License</a></li>
<li><a href="https://www.apache.org/foundation/thanks.html">Thanks!</a></li>
<li><a href="https://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
<li><a href="https://privacy.apache.org/policies/privacy-policy-public.html">Privacy Policy</a></li>
</ul>
</li>
<li class="dropdown">
<a data-toggle="dropdown" href="#" class="dropdown-toggle">
Support<b class="caret"></b>
</a>
<ul class="dropdown-menu">
<li><a href="/mail.html">User Mailing List</a></li>
<li><a href="https://issues.apache.org/jira/browse/WW">Issue Tracker</a></li>
<li><a href="/security.html">Reporting Security Issues</a></li>
<li><a href="/commercial-support.html">Commercial Support</a></li>
<li class="divider"></li>
<li><a href="https://cwiki.apache.org/confluence/display/WW/Migration+Guide">Version Notes</a></li>
<li><a href="https://cwiki.apache.org/confluence/display/WW/Security+Bulletins">Security Bulletins</a></li>
<li class="divider"></li>
<li><a href="/maven/project-info.html">Maven Project Info</a></li>
<li><a href="/maven/struts2-core/dependencies.html">Struts Core Dependencies</a></li>
<li><a href="/maven/struts2-plugins/modules.html">Plugin Dependencies</a></li>
</ul>
</li>
<li class="dropdown">
<a data-toggle="dropdown" href="#" class="dropdown-toggle">
Documentation<b class="caret"></b>
</a>
<ul class="dropdown-menu">
<li><a href="/birdseye.html">Birds Eye</a></li>
<li><a href="/primer.html">Key Technologies</a></li>
<li><a href="/kickstart.html">Kickstart FAQ</a></li>
<li><a href="https://cwiki.apache.org/confluence/display/WW/Home">Wiki</a></li>
<li class="divider"></li>
<li><a href="/getting-started/">Getting Started</a></li>
<li><a href="/security/">Security Guide</a></li>
<li><a href="/core-developers/">Core Developers Guide</a></li>
<li><a href="/tag-developers/">Tag Developers Guide</a></li>
<li><a href="/maven-archetypes/">Maven Archetypes</a></li>
<li><a href="/plugins/">Plugins</a></li>
<li><a href="/maven/struts2-core/apidocs/index.html">Struts Core API</a></li>
<li><a href="/tag-developers/tag-reference.html">Tag reference</a></li>
<li><a href="https://cwiki.apache.org/confluence/display/WW/FAQs">FAQs</a></li>
<li><a href="http://cwiki.apache.org/S2PLUGINS/home.html">Plugin registry</a></li>
</ul>
</li>
<li class="dropdown">
<a data-toggle="dropdown" href="#" class="dropdown-toggle">
Contributing<b class="caret"></b>
</a>
<ul class="dropdown-menu">
<li><a href="/youatstruts.html">You at Struts</a></li>
<li><a href="/helping.html">How to Help FAQ</a></li>
<li><a href="/dev-mail.html">Development Lists</a></li>
<li class="divider"></li>
<li><a href="/submitting-patches.html">Submitting patches</a></li>
<li><a href="/builds.html">Source Code and Builds</a></li>
<li><a href="/coding-standards.html">Coding standards</a></li>
<li><a href="/contributors/">Contributors Guide</a></li>
<li class="divider"></li>
<li><a href="/release-guidelines.html">Release Guidelines</a></li>
<li><a href="/bylaws.html">PMC Charter</a></li>
<li><a href="/volunteers.html">Volunteers</a></li>
<li><a href="https://gitbox.apache.org/repos/asf?p=struts.git">Source Repository</a></li>
<li><a href="/updating-website.html">Updating the website</a></li>
</ul>
</li>
<li class="apache"><a href="http://www.apache.org/"><img src="/img/apache.png"></a></li>
</ul>
</div>
</div>
</div>
</nav>
</header>
<article class="container">
<section class="col-md-12">
<a class="edit-on-gh" href="https://github.com/apache/struts-site/edit/master/source/announce-2011.html" title="Edit this page on GitHub">Edit on GitHub</a>
<h1>Announcements - 2011</h1>
<p class="pull-right">
Skip to: <a href="announce-2010.html">Announcements - 2010</a>
</p>
<h4 id="a20111225">25 December 2011 - Struts 2.3.1.1 General Availability Release</h4>
<p>
The Apache Struts group is pleased to announce that Struts 2.3.1.1 is
available as a "General Availability" release. The GA designation is our
highest quality grade.
</p>
<p>
Apache Struts 2 is an elegant, extensible framework for creating
enterprise-ready Java web applications. The framework is designed to
streamline the full development cycle, from building, to deploying, to
maintaining applications over time.
</p>
<p>
An important vulnerability were solved with this release:
<ul>
<li>
Remote command execution and arbitrary file overwrite
</li>
<li>
Strict DMI mode does not work correctly
</li>
</ul>
</p>
<p>
All developers are strongly advised to update existing Struts 2 applications
to Struts 2.3.1.1.
</p>
<p>
Struts 2.3.1.1 is available in a full distribution,
or as separate library, source, example and documentation
distributions, from the
<a href="http://struts.apache.org/download.cgi#struts2311">releases page</a>.
The release is also available through the central Maven repository under Group ID
"org.apache.struts". The
<a href="http://struts.apache.org/docs/version-notes-2311.html">release notes</a>
are available online.
</p>
<p>
The 2.3.x series of the Apache Struts framework has a minimum
requirement of the following specification versions: Servlet API 2.4,
JSP API 2.0, and Java 5.
</p>
<p>
Should any issues arise with your use of any version of the Struts
framework, please post your comments to the user list, and, if
appropriate, file a tracking ticket.
</p>
<h4 id="a20111218">18 December 2011 - Struts 2.0.14 End of Life Announcement</h4>
<p>
The Apache Struts Team likes to inform you that the Struts 2.0 branch has reached it's end of life
and is no longer supported. All users of Struts 2.0.14 or earlier Struts 2 versions are strongly
advised to update their existing applications to Struts 2.3.x.
</p>
<p>
Struts 2.0.14 was for some time maintained in parallel to the 2.1 and 2.2 branches, since Struts 2.1
introduced some API and plugin changes that were likely to break existing user code on top of Struts 2.
However, the community interest in maintaining the Struts 2.0.x branch was not strong enough to
keep it sufficiently up to date, especially in terms of security fixes. There are several serious
security problems that, while being continuously addressed in later Struts 2 versions, did not make
it into the 2.0.x branch. For that reason the Apache Struts PMC decided to remove 2.0.14 as a supported
version.
</p>
<p>
For more information on how to upgrade existing applications running on top of Struts 2.0.x to
Struts 2.1 and later, please read the
<a href="https://cwiki.apache.org/confluence/display/S2WIKI/Troubleshooting+guide+migrating+from+Struts+2.0.x+to+2.1.x">
Guide to migrating from Struts 2.0.x to 2.1.x</a>.
</p>
<h4 id="a20111212">12 December 2011 - Struts 2.3.1 General Availability Release</h4>
<p>
The Apache Struts group is pleased to announce that Struts 2.3.1 is
available as a "General Availability" release. The GA designation is our
highest quality grade.
</p>
<p>
Apache Struts 2 is an elegant, extensible framework for creating
enterprise-ready Java web applications. The framework is designed to
streamline the full development cycle, from building, to deploying, to
maintaining applications over time.
</p>
<p>
Some new futures are:
<ul>
<li>
New Portlet 2.0 (JSR 286) plugin replaced the Portlet 1.0 (JSR 168) plugin
</li>
<li>
New CDI plugin was added to allow use CDI (JavaEE 6) as an Object Factory in Struts 2
</li>
<li>
The dependencies of the Struts2-Spring plugin were upgraded from Spring 2.5 to 3.0
</li>
</ul>
Besides that, various other bug fixes, improvements and security enhancements have been incorporated.
</p>
<p>
All developers are strongly advised to update existing Struts 2 applications
to Struts 2.3.1.
</p>
<p>
Struts 2.3.1 is available in a full distribution,
or as separate library, source, example and documentation
distributions, from the
<a href="http://struts.apache.org/download.cgi#struts231">releases page</a>.
The release is also available through the central Maven repository under Group ID
"org.apache.struts". The
<a href="http://struts.apache.org/2.3.1/docs/version-notes-231.html">release notes</a>
are available online.
</p>
<p>
The 2.3.x series of the Apache Struts framework has a minimum
requirement of the following specification versions: Servlet API 2.4,
JSP API 2.0, and Java 5.
</p>
<p>
Should any issues arise with your use of any version of the Struts
framework, please post your comments to the user list, and, if
appropriate, file a tracking ticket.
</p>
<h4 id="a20111007">7 September 2011 - Struts 2.2.3.1 General Availability Release</h4>
<p>
The Apache Struts group is pleased to announce that Struts 2.2.3.1 is
available as a "General Availability" release. The GA designation is our
highest quality grade.
</p>
<p>
Apache Struts 2 is an elegant, extensible framework for creating
enterprise-ready Java web applications. The framework is designed to
streamline the full development cycle, from building, to deploying, to
maintaining applications over time.
</p>
<p>
An important vulnerability were solved with this release:
<ul>
<li>
User input was evaluated as an OGNL expression when there's a conversion error.
</li>
</ul>
</p>
<p>
All developers are strongly advised to update existing Struts 2 applications
to Struts 2.2.3.1.
</p>
<p>
Struts 2.2.3.1 is available in a full distribution,
or as separate library, source, example and documentation
distributions, from the
<a href="http://struts.apache.org/download.cgi#struts2231">releases page</a>.
The release is also available through the central Maven repository under Group ID
"org.apache.struts". The
<a href="http://struts.apache.org/2.2.3.1/docs/version-notes-2231.html">release notes</a>
are available online.
</p>
<p>
The 2.2.x series of the Apache Struts framework has a minimum
requirement of the following specification versions: Servlet API 2.4,
JSP API 2.0, and Java 5.
</p>
<p>
Should any issues arise with your use of any version of the Struts
framework, please post your comments to the user list, and, if
appropriate, file a tracking ticket.
</p>
<p class="pull-right">
Skip to: <a href="announce-2010.html">Announcements - 2010</a>
</p>
<p class="pull-left">
<strong>Next:</strong>
<a href="kickstart.html">Kickstart FAQ</a>
</p>
</section>
</article>
<footer class="container">
<div class="col-md-12">
Copyright &copy; 2000-2022 <a href="https://www.apache.org/">The Apache Software Foundation</a>.
Apache Struts, Struts, Apache, the Apache feather logo, and the Apache Struts project logos are
trademarks of The Apache Software Foundation. All Rights Reserved.
</div>
<div class="col-md-12">Logo and website design donated by <a href="https://softwaremill.com/">SoftwareMill</a>.</div>
</footer>
<script>!function (d, s, id) {
var js, fjs = d.getElementsByTagName(s)[0];
if (!d.getElementById(id)) {
js = d.createElement(s);
js.id = id;
js.src = "//platform.twitter.com/widgets.js";
fjs.parentNode.insertBefore(js, fjs);
}
}(document, "script", "twitter-wjs");</script>
<script src="https://apis.google.com/js/platform.js" async="async" defer="defer"></script>
<div id="fb-root"></div>
<script>(function (d, s, id) {
var js, fjs = d.getElementsByTagName(s)[0];
if (d.getElementById(id)) return;
js = d.createElement(s);
js.id = id;
js.src = "//connect.facebook.net/en_GB/all.js#xfbml=1";
fjs.parentNode.insertBefore(js, fjs);
}(document, 'script', 'facebook-jssdk'));</script>
</body>
</html>