content/announce-2012.html - struts-site - Git at Google

 <!DOCTYPE html>
 <html lang="en">
 <head>
   <meta charset="UTF-8"/>
   <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
   <meta name="Date-Revision-yyyymmdd" content="20140918"/>
   <meta http-equiv="Content-Language" content="en"/>
   <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">

   <title>Announcements 2012</title>

   <link href="//fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,700,400italic,600italic,700italic" rel="stylesheet" type="text/css">
   <link href="//netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css" rel="stylesheet">
   <link href="/css/main.css" rel="stylesheet">
   <link href="/css/custom.css" rel="stylesheet">
   <link href="/css/syntax.css" rel="stylesheet">

   <script src="//code.jquery.com/jquery-1.11.0.min.js"></script>
   <script type="text/javascript" src="/bootstrap/js/bootstrap.js"></script>
   <script type="text/javascript" src="/js/community.js"></script>

   <!-- Matomo -->
   <script>
     var _paq = window._paq = window._paq || [];
     /* tracker methods like "setCustomDimension" should be called before "trackPageView" */
     /* We explicitly disable cookie tracking to avoid privacy issues */
     _paq.push(['disableCookies']);
     _paq.push(['trackPageView']);
     _paq.push(['enableLinkTracking']);
     (function() {
       var u="//analytics.apache.org/";
       _paq.push(['setTrackerUrl', u+'matomo.php']);
       _paq.push(['setSiteId', '41']);
       var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];
       g.async=true; g.src=u+'matomo.js'; s.parentNode.insertBefore(g,s);
     })();
   </script>
   <!-- End Matomo Code -->
 </head>
 <body>

 <a href="https://github.com/apache/struts" class="github-ribbon">
   <img decoding="async" loading="lazy" style="position: absolute; right: 0; border: 0;" width="149" height="149" src="https://github.blog/wp-content/uploads/2008/12/forkme_right_red_aa0000.png?resize=149%2C149" class="attachment-full size-full" alt="Fork me on GitHub" data-recalc-dims="1">
 </a>

 <header>
   <nav>
     <div role="navigation" class="navbar navbar-default navbar-fixed-top">
       <div class="container">
         <div class="navbar-header">
           <button type="button" data-toggle="collapse" data-target="#struts-menu" class="navbar-toggle">
             Menu
             <span class="sr-only">Toggle navigation</span>
             <span class="icon-bar"></span>
             <span class="icon-bar"></span>
             <span class="icon-bar"></span>
           </button>
           <a href="/index.html" class="navbar-brand logo"><img src="/img/struts-logo.svg"></a>
         </div>
         <div id="struts-menu" class="navbar-collapse collapse">
           <ul class="nav navbar-nav">
             <li class="dropdown">
               <a data-toggle="dropdown" href="#" class="dropdown-toggle">
                 Home<b class="caret"></b>
               </a>
               <ul class="dropdown-menu">
                 <li><a href="/index.html">Welcome</a></li>
                 <li><a href="/download.cgi">Download</a></li>
                 <li><a href="/releases.html">Releases</a></li>
                 <li><a href="/announce-2023.html">Announcements</a></li>
                 <li><a href="http://www.apache.org/licenses/">License</a></li>
                 <li><a href="https://www.apache.org/foundation/thanks.html">Thanks!</a></li>
                 <li><a href="https://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
                 <li><a href="https://privacy.apache.org/policies/privacy-policy-public.html">Privacy Policy</a></li>
               </ul>
             </li>
             <li class="dropdown">
               <a data-toggle="dropdown" href="#" class="dropdown-toggle">
                 Support<b class="caret"></b>
               </a>
               <ul class="dropdown-menu">
                 <li><a href="/mail.html">User Mailing List</a></li>
                 <li><a href="https://issues.apache.org/jira/browse/WW">Issue Tracker</a></li>
                 <li><a href="/security.html">Reporting Security Issues</a></li>
                 <li><a href="/commercial-support.html">Commercial Support</a></li>
                 <li class="divider"></li>
                 <li><a href="https://cwiki.apache.org/confluence/display/WW/Migration+Guide">Version Notes</a></li>
                 <li><a href="https://cwiki.apache.org/confluence/display/WW/Security+Bulletins">Security Bulletins</a></li>
                 <li class="divider"></li>
                 <li><a href="/maven/project-info.html">Maven Project Info</a></li>
                 <li><a href="/maven/struts2-core/dependencies.html">Struts Core Dependencies</a></li>
                 <li><a href="/maven/struts2-plugins/modules.html">Plugin Dependencies</a></li>
               </ul>
             </li>
             <li class="dropdown">
               <a data-toggle="dropdown" href="#" class="dropdown-toggle">
                 Documentation<b class="caret"></b>
               </a>
               <ul class="dropdown-menu">
                 <li><a href="/birdseye.html">Birds Eye</a></li>
                 <li><a href="/primer.html">Key Technologies</a></li>
                 <li><a href="/kickstart.html">Kickstart FAQ</a></li>
                 <li><a href="https://cwiki.apache.org/confluence/display/WW/Home">Wiki</a></li>
                 <li class="divider"></li>
                 <li><a href="/getting-started/">Getting Started</a></li>
                 <li><a href="/security/">Security Guide</a></li>
                 <li><a href="/core-developers/">Core Developers Guide</a></li>
                 <li><a href="/tag-developers/">Tag Developers Guide</a></li>
                 <li><a href="/maven-archetypes/">Maven Archetypes</a></li>
                 <li><a href="/plugins/">Plugins</a></li>
                 <li><a href="/maven/struts2-core/apidocs/index.html">Struts Core API</a></li>
                 <li><a href="/tag-developers/tag-reference.html">Tag reference</a></li>
                 <li><a href="https://cwiki.apache.org/confluence/display/WW/FAQs">FAQs</a></li>
                 <li><a href="http://cwiki.apache.org/S2PLUGINS/home.html">Plugin registry</a></li>
               </ul>
             </li>
             <li class="dropdown">
               <a data-toggle="dropdown" href="#" class="dropdown-toggle">
                 Contributing<b class="caret"></b>
               </a>
               <ul class="dropdown-menu">
                 <li><a href="/youatstruts.html">You at Struts</a></li>
                 <li><a href="/helping.html">How to Help FAQ</a></li>
                 <li><a href="/dev-mail.html">Development Lists</a></li>
                 <li class="divider"></li>
                 <li><a href="/submitting-patches.html">Submitting patches</a></li>
                 <li><a href="/builds.html">Source Code and Builds</a></li>
                 <li><a href="/coding-standards.html">Coding standards</a></li>
                 <li><a href="/contributors/">Contributors Guide</a></li>
                 <li class="divider"></li>
                 <li><a href="/release-guidelines.html">Release Guidelines</a></li>
                 <li><a href="/bylaws.html">PMC Charter</a></li>
                 <li><a href="/volunteers.html">Volunteers</a></li>
                 <li><a href="https://gitbox.apache.org/repos/asf?p=struts.git">Source Repository</a></li>
                 <li><a href="/updating-website.html">Updating the website</a></li>
               </ul>
             </li>
             <li class="apache"><a href="http://www.apache.org/"><img src="/img/apache.png"></a></li>
           </ul>
         </div>
       </div>
     </div>
   </nav>
 </header>


 <article class="container">
   <section class="col-md-12">
     <a class="edit-on-gh" href="https://github.com/apache/struts-site/edit/master/source/announce-2012.html" title="Edit this page on GitHub">Edit on GitHub</a>

     <h1>Announcements - 2012</h1>

 <p class="pull-right">
   Skip to:
   <a href="announce-2011.html">Announcements - 2011</a>
 </p>

 <h4 id="a20121222">22 December 2012 - Struts 2.3.8 General Availability Release</h4>
 <p>
   The Apache Struts group is pleased to announce that Struts 2.3.8 is
   available as a "General Availability" release. The GA designation is our
   highest quality grade.
 </p>
 <p>
   Apache Struts 2 is an elegant, extensible framework for creating
   enterprise-ready Java web applications. The framework is designed to
   streamline the full development cycle, from building, to deploying, to
   maintaining applications over time.
 </p>
 <p>
   It's a mostly maintenance release which improves overall performance which should be significant
   better than in version 2.3.7 and slightly better than in version 2.3.4.1. This version depends on new OGNL
   version 3.0.6 - thanks to Pelladi Gabor and Johno Crawford for their contribution!
   Please check the Version Notes to see more details.
 </p>
 <p>
   All developers are strongly advised to update existing Struts 2 applications
   to Struts 2.3.8.
 </p>
 <p>
   Struts 2.3.8 is available in a full distribution or as separate library, source, example and documentation
   distributions, from the
   <a href="http://struts.apache.org/download.cgi#struts238">releases page</a>.
   The release is also available through the central Maven repository under Group ID "org.apache.struts". The
   <a href="http://struts.apache.org/docs/version-notes-238.html">release notes</a>
   are available online.
 </p>
 <p>
   The 2.3.x series of the Apache Struts framework has a minimum
   requirement of the following specification versions: Servlet API 2.4,
   JSP API 2.0, and Java 5.
 </p>
 <p>
   Should any issues arise with your use of any version of the Struts
   framework, please post your comments to the user list, and, if
   appropriate, file a tracking ticket.
 </p>

 <h4 id="a20121119">19 November 2012 - Struts 2.3.7 General Availability Release</h4>
 <p>
   The Apache Struts group is pleased to announce that Struts 2.3.7 is
   available as a "General Availability" release. The GA designation is our
   highest quality grade.
 </p>
 <p>
   Apache Struts 2 is an elegant, extensible framework for creating
   enterprise-ready Java web applications. The framework is designed to
   streamline the full development cycle, from building, to deploying, to
   maintaining applications over time.
 </p>
 <p>
   It's a mostly maintenance release where many bugs were solved and many improvements were added.
   Please check the Version Notes to see more details, also performance was improved.
 </p>
 <p>
   All developers are strongly advised to update existing Struts 2 applications
   to Struts 2.3.7.
 </p>
 <p>
   Struts 2.3.7 is available in a full distribution,
   or as separate library, source, example and documentation
   distributions, from the
   <a href="http://struts.apache.org/download.cgi#struts237">releases page</a>.
   The release is also available through the central Maven repository under Group ID
   "org.apache.struts". The
   <a href="http://struts.apache.org/docs/version-notes-237.html">release notes</a>
   are available online.
 </p>
 <p>
   The 2.3.x series of the Apache Struts framework has a minimum
   requirement of the following specification versions: Servlet API 2.4,
   JSP API 2.0, and Java 5.
 </p>
 <p>
   Should any issues arise with your use of any version of the Struts
   framework, please post your comments to the user list, and, if
   appropriate, file a tracking ticket.
 </p>

 <h4 id="a20120813">13 August 2012 - Struts 2.3.4.1 General Availability Release</h4>
 <p>
   The Apache Struts group is pleased to announce that Struts 2.3.4.1 is
   available as a "General Availability" release. The GA designation is our
   highest quality grade.
 </p>
 <p>
   Apache Struts 2 is an elegant, extensible framework for creating
   enterprise-ready Java web applications. The framework is designed to
   streamline the full development cycle, from building, to deploying, to
   maintaining applications over time.
 </p>
 <p>
   Two security issues were solved with this release:
 <ul>
   <li>
     Decoupling of session attribute and parameter naming for Struts 2 token mechanism,
     to improve security when used for CSRF-attack protection
   </li>
   <li>
     Parameter name length is now by default restricted to 100 characters to diminish possible DOS
     attack effectiveness
   </li>
 </ul>
 </p>
 <p>
   All developers are strongly advised to update existing Struts 2 applications
   to Struts 2.3.4.1.
 </p>
 <p>
   Struts 2.3.4.1 is available in a full distribution,
   or as separate library, source, example and documentation
   distributions, from the
   <a href="http://struts.apache.org/download.cgi#struts2341">releases page</a>.
   The release is also available through the central Maven repository under Group ID
   "org.apache.struts". The
   <a href="http://struts.apache.org/docs/version-notes-2341.html">release notes</a>
   and the
   <a href="https://cwiki.apache.org/confluence/display/WW/S2-010">token mechanism security bulletin</a>
   as well as the
   <a href="https://cwiki.apache.org/confluence/display/WW/S2-011">parameter name length security bulletin</a>
   are available online.
 </p>
 <p>
   The 2.3.x series of the Apache Struts framework has a minimum
   requirement of the following specification versions: Servlet API 2.4,
   JSP API 2.0, and Java 5.
 </p>
 <p>
   Should any issues arise with your use of any version of the Struts
   framework, please post your comments to the user list, and, if
   appropriate, file a tracking ticket.
 </p>

 <h4 id="a20120511">12 May 2012 - Struts 2.3.4 General Availability Release</h4>
 <p>
   The Apache Struts group is pleased to announce that Struts 2.3.4 is
   available as a "General Availability" release. The GA designation is our
   highest quality grade.
 </p>
 <p>
   Apache Struts 2 is an elegant, extensible framework for creating
   enterprise-ready Java web applications. The framework is designed to
   streamline the full development cycle, from building, to deploying, to
   maintaining applications over time.
 </p>
 <p>
   It's a mostly maintenance release where many bugs were solved and many improvements were added.
   Please check the Version Notes to see more details.
 </p>
 <p>
   All developers are strongly advised to update existing Struts 2 applications
   to Struts 2.3.4.
 </p>
 <p>
   Struts 2.3.4 is available in a full distribution, or as separate library, source,
   example and documentation distributions, from the
   <a href="http://struts.apache.org/download.cgi#struts234">releases page</a>.
   The release is also available through the central Maven repository under Group ID
   "org.apache.struts". The
   <a href="http://struts.apache.org/docs/version-notes-234.html">version notes</a>
   are available online.
 </p>
 <p>
   The 2.3.x series of the Apache Struts framework has a minimum
   requirement of the following specification versions: Servlet API 2.4,
   JSP API 2.0, and Java 5.
 </p>
 <p>
   Should any issues arise with your use of any version of the Struts
   framework, please post your comments to the user list, and, if
   appropriate, file a tracking ticket.
 </p>

 <h4 id="a20120416">16 April 2012 - Struts 2.3.3 General Availability Release</h4>
 <p>
   The Apache Struts group is pleased to announce that Struts 2.3.3 is
   available as a "General Availability" release. The GA designation is our
   highest quality grade.
 </p>
 <p>
   Apache Struts 2 is an elegant, extensible framework for creating
   enterprise-ready Java web applications. The framework is designed to
   streamline the full development cycle, from building, to deploying, to
   maintaining applications over time.
 </p>
 <p>
   It's a mostly maintenance release where many bugs were solved and many improvements were added.
   Please check the Version Notes to see more details.
 </p>
 <p>
   All developers are strongly advised to update existing Struts 2 applications
   to Struts 2.3.3.
 </p>
 <p>
   Struts 2.3.3 is available in a full distribution, or as separate library, source,
   example and documentation distributions, from the
   <a href="http://struts.apache.org/download.cgi#struts233">releases page</a>.
   The release is also available through the central Maven repository under Group ID
   "org.apache.struts". The
   <a href="http://struts.apache.org/docs/version-notes-233.html">version notes</a>
   are available online.
 </p>
 <p>
   The 2.3.x series of the Apache Struts framework has a minimum
   requirement of the following specification versions: Servlet API 2.4,
   JSP API 2.0, and Java 5.
 </p>
 <p>
   Should any issues arise with your use of any version of the Struts
   framework, please post your comments to the user list, and, if
   appropriate, file a tracking ticket.
 </p>

 <h4 id="a20120122">22 January 2012 - Struts 2.3.1.2 General Availability Release</h4>
 <p>
   The Apache Struts group is pleased to announce that Struts 2.3.1.2 is
   available as a "General Availability" release. The GA designation is our
   highest quality grade.
 </p>
 <p>
   Apache Struts 2 is an elegant, extensible framework for creating
   enterprise-ready Java web applications. The framework is designed to
   streamline the full development cycle, from building, to deploying, to
   maintaining applications over time.
 </p>
 <p>
   An important vulnerability were solved with this release:
 <ul>
   <li>
     ParameterInterceptor vulnerability allowed remote command execution
   </li>
   <li>
     Default acceptedParamNames has been updated to more restrictive values
   </li>
 </ul>
 </p>
 <p>
   All developers are strongly advised to update existing Struts 2 applications
   to Struts 2.3.1.2.
 </p>
 <p>
   Struts 2.3.1.2 is available in a full distribution,
   or as separate library, source, example and documentation
   distributions, from the
   <a href="http://struts.apache.org/download.cgi#struts2312">releases page</a>.
   The release is also available through the central Maven repository under Group ID
   "org.apache.struts". The
   <a href="http://struts.apache.org/docs/version-notes-2312.html">release notes</a>
   and the
   <a href="https://cwiki.apache.org/confluence/display/WW/S2-009">security bulletin</a>
   are available online.
 </p>
 <p>
   The 2.3.x series of the Apache Struts framework has a minimum
   requirement of the following specification versions: Servlet API 2.4,
   JSP API 2.0, and Java 5.
 </p>
 <p>
   Should any issues arise with your use of any version of the Struts
   framework, please post your comments to the user list, and, if
   appropriate, file a tracking ticket.
 </p>

 <p class="pull-right">
   Skip to: <a href="announce-2011.html">Announcements - 2011</a>
 </p>

 <p class="pull-left">
   <strong>Next:</strong>
   <a href="kickstart.html">Kickstart FAQ</a>
 </p>

   </section>
 </article>


 <footer class="container">
   <div class="col-md-12">
     Copyright &copy; 2000-2022 <a href="https://www.apache.org/">The Apache Software Foundation</a>.
     Apache Struts, Struts, Apache, the Apache feather logo, and the Apache Struts project logos are
     trademarks of The Apache Software Foundation. All Rights Reserved.
   </div>
   <div class="col-md-12">Logo and website design donated by <a href="https://softwaremill.com/">SoftwareMill</a>.</div>
 </footer>

 <script>!function (d, s, id) {
   var js, fjs = d.getElementsByTagName(s)[0];
   if (!d.getElementById(id)) {
     js = d.createElement(s);
     js.id = id;
     js.src = "//platform.twitter.com/widgets.js";
     fjs.parentNode.insertBefore(js, fjs);
   }
 }(document, "script", "twitter-wjs");</script>
 <script src="https://apis.google.com/js/platform.js" async="async" defer="defer"></script>

 <div id="fb-root"></div>

 <script>(function (d, s, id) {
   var js, fjs = d.getElementsByTagName(s)[0];
   if (d.getElementById(id)) return;
   js = d.createElement(s);
   js.id = id;
   js.src = "//connect.facebook.net/en_GB/all.js#xfbml=1";
   fjs.parentNode.insertBefore(js, fjs);
 }(document, 'script', 'facebook-jssdk'));</script>


 </body>
 </html>
	<!DOCTYPE html>
	<html lang="en">
	<head>
	<meta charset="UTF-8"/>
	<meta name="viewport" content="width=device-width, initial-scale=1.0"/>
	<meta name="Date-Revision-yyyymmdd" content="20140918"/>
	<meta http-equiv="Content-Language" content="en"/>
	<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">

	<title>Announcements 2012</title>

	<link href="//fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,700,400italic,600italic,700italic" rel="stylesheet" type="text/css">
	<link href="//netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css" rel="stylesheet">
	<link href="/css/main.css" rel="stylesheet">
	<link href="/css/custom.css" rel="stylesheet">
	<link href="/css/syntax.css" rel="stylesheet">

	<script src="//code.jquery.com/jquery-1.11.0.min.js"></script>
	<script type="text/javascript" src="/bootstrap/js/bootstrap.js"></script>
	<script type="text/javascript" src="/js/community.js"></script>

	<!-- Matomo -->
	<script>
	var _paq = window._paq = window._paq \|\| [];
	/* tracker methods like "setCustomDimension" should be called before "trackPageView" */
	/* We explicitly disable cookie tracking to avoid privacy issues */
	_paq.push(['disableCookies']);
	_paq.push(['trackPageView']);
	_paq.push(['enableLinkTracking']);
	(function() {
	var u="//analytics.apache.org/";
	_paq.push(['setTrackerUrl', u+'matomo.php']);
	_paq.push(['setSiteId', '41']);
	var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];
	g.async=true; g.src=u+'matomo.js'; s.parentNode.insertBefore(g,s);
	})();
	</script>
	<!-- End Matomo Code -->
	</head>
	<body>

	<a href="https://github.com/apache/struts" class="github-ribbon">
	<img decoding="async" loading="lazy" style="position: absolute; right: 0; border: 0;" width="149" height="149" src="https://github.blog/wp-content/uploads/2008/12/forkme_right_red_aa0000.png?resize=149%2C149" class="attachment-full size-full" alt="Fork me on GitHub" data-recalc-dims="1">
	</a>

	<header>
	<nav>
	<div role="navigation" class="navbar navbar-default navbar-fixed-top">
	<div class="container">
	<div class="navbar-header">
	<button type="button" data-toggle="collapse" data-target="#struts-menu" class="navbar-toggle">
	Menu
	<span class="sr-only">Toggle navigation</span>
	<span class="icon-bar"></span>
	<span class="icon-bar"></span>
	<span class="icon-bar"></span>
	</button>
	<a href="/index.html" class="navbar-brand logo"><img src="/img/struts-logo.svg"></a>
	</div>
	<div id="struts-menu" class="navbar-collapse collapse">
	<ul class="nav navbar-nav">
	<li class="dropdown">
	<a data-toggle="dropdown" href="#" class="dropdown-toggle">
	Home<b class="caret"></b>
	</a>
	<ul class="dropdown-menu">
	<li><a href="/index.html">Welcome</a></li>
	<li><a href="/download.cgi">Download</a></li>
	<li><a href="/releases.html">Releases</a></li>
	<li><a href="/announce-2023.html">Announcements</a></li>
	<li><a href="http://www.apache.org/licenses/">License</a></li>
	<li><a href="https://www.apache.org/foundation/thanks.html">Thanks!</a></li>
	<li><a href="https://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
	<li><a href="https://privacy.apache.org/policies/privacy-policy-public.html">Privacy Policy</a></li>
	</ul>
	</li>
	<li class="dropdown">
	<a data-toggle="dropdown" href="#" class="dropdown-toggle">
	Support<b class="caret"></b>
	</a>
	<ul class="dropdown-menu">
	<li><a href="/mail.html">User Mailing List</a></li>
	<li><a href="https://issues.apache.org/jira/browse/WW">Issue Tracker</a></li>
	<li><a href="/security.html">Reporting Security Issues</a></li>
	<li><a href="/commercial-support.html">Commercial Support</a></li>
	<li class="divider"></li>
	<li><a href="https://cwiki.apache.org/confluence/display/WW/Migration+Guide">Version Notes</a></li>
	<li><a href="https://cwiki.apache.org/confluence/display/WW/Security+Bulletins">Security Bulletins</a></li>
	<li class="divider"></li>
	<li><a href="/maven/project-info.html">Maven Project Info</a></li>
	<li><a href="/maven/struts2-core/dependencies.html">Struts Core Dependencies</a></li>
	<li><a href="/maven/struts2-plugins/modules.html">Plugin Dependencies</a></li>
	</ul>
	</li>
	<li class="dropdown">
	<a data-toggle="dropdown" href="#" class="dropdown-toggle">
	Documentation<b class="caret"></b>
	</a>
	<ul class="dropdown-menu">
	<li><a href="/birdseye.html">Birds Eye</a></li>
	<li><a href="/primer.html">Key Technologies</a></li>
	<li><a href="/kickstart.html">Kickstart FAQ</a></li>
	<li><a href="https://cwiki.apache.org/confluence/display/WW/Home">Wiki</a></li>
	<li class="divider"></li>
	<li><a href="/getting-started/">Getting Started</a></li>
	<li><a href="/security/">Security Guide</a></li>
	<li><a href="/core-developers/">Core Developers Guide</a></li>
	<li><a href="/tag-developers/">Tag Developers Guide</a></li>
	<li><a href="/maven-archetypes/">Maven Archetypes</a></li>
	<li><a href="/plugins/">Plugins</a></li>
	<li><a href="/maven/struts2-core/apidocs/index.html">Struts Core API</a></li>
	<li><a href="/tag-developers/tag-reference.html">Tag reference</a></li>
	<li><a href="https://cwiki.apache.org/confluence/display/WW/FAQs">FAQs</a></li>
	<li><a href="http://cwiki.apache.org/S2PLUGINS/home.html">Plugin registry</a></li>
	</ul>
	</li>
	<li class="dropdown">
	<a data-toggle="dropdown" href="#" class="dropdown-toggle">
	Contributing<b class="caret"></b>
	</a>
	<ul class="dropdown-menu">
	<li><a href="/youatstruts.html">You at Struts</a></li>
	<li><a href="/helping.html">How to Help FAQ</a></li>
	<li><a href="/dev-mail.html">Development Lists</a></li>
	<li class="divider"></li>
	<li><a href="/submitting-patches.html">Submitting patches</a></li>
	<li><a href="/builds.html">Source Code and Builds</a></li>
	<li><a href="/coding-standards.html">Coding standards</a></li>
	<li><a href="/contributors/">Contributors Guide</a></li>
	<li class="divider"></li>
	<li><a href="/release-guidelines.html">Release Guidelines</a></li>
	<li><a href="/bylaws.html">PMC Charter</a></li>
	<li><a href="/volunteers.html">Volunteers</a></li>
	<li><a href="https://gitbox.apache.org/repos/asf?p=struts.git">Source Repository</a></li>
	<li><a href="/updating-website.html">Updating the website</a></li>
	</ul>
	</li>
	<li class="apache"><a href="http://www.apache.org/"><img src="/img/apache.png"></a></li>
	</ul>
	</div>
	</div>
	</div>
	</nav>
	</header>


	<article class="container">
	<section class="col-md-12">
	<a class="edit-on-gh" href="https://github.com/apache/struts-site/edit/master/source/announce-2012.html" title="Edit this page on GitHub">Edit on GitHub</a>

	<h1>Announcements - 2012</h1>

	<p class="pull-right">
	Skip to:
	<a href="announce-2011.html">Announcements - 2011</a>
	</p>

	<h4 id="a20121222">22 December 2012 - Struts 2.3.8 General Availability Release</h4>
	<p>
	The Apache Struts group is pleased to announce that Struts 2.3.8 is
	available as a "General Availability" release. The GA designation is our
	highest quality grade.
	</p>
	<p>
	Apache Struts 2 is an elegant, extensible framework for creating
	enterprise-ready Java web applications. The framework is designed to
	streamline the full development cycle, from building, to deploying, to
	maintaining applications over time.
	</p>
	<p>
	It's a mostly maintenance release which improves overall performance which should be significant
	better than in version 2.3.7 and slightly better than in version 2.3.4.1. This version depends on new OGNL
	version 3.0.6 - thanks to Pelladi Gabor and Johno Crawford for their contribution!
	Please check the Version Notes to see more details.
	</p>
	<p>
	All developers are strongly advised to update existing Struts 2 applications
	to Struts 2.3.8.
	</p>
	<p>
	Struts 2.3.8 is available in a full distribution or as separate library, source, example and documentation
	distributions, from the
	<a href="http://struts.apache.org/download.cgi#struts238">releases page</a>.
	The release is also available through the central Maven repository under Group ID "org.apache.struts". The
	<a href="http://struts.apache.org/docs/version-notes-238.html">release notes</a>
	are available online.
	</p>
	<p>
	The 2.3.x series of the Apache Struts framework has a minimum
	requirement of the following specification versions: Servlet API 2.4,
	JSP API 2.0, and Java 5.
	</p>
	<p>
	Should any issues arise with your use of any version of the Struts
	framework, please post your comments to the user list, and, if
	appropriate, file a tracking ticket.
	</p>

	<h4 id="a20121119">19 November 2012 - Struts 2.3.7 General Availability Release</h4>
	<p>
	The Apache Struts group is pleased to announce that Struts 2.3.7 is
	available as a "General Availability" release. The GA designation is our
	highest quality grade.
	</p>
	<p>
	Apache Struts 2 is an elegant, extensible framework for creating
	enterprise-ready Java web applications. The framework is designed to
	streamline the full development cycle, from building, to deploying, to
	maintaining applications over time.
	</p>
	<p>
	It's a mostly maintenance release where many bugs were solved and many improvements were added.
	Please check the Version Notes to see more details, also performance was improved.
	</p>
	<p>
	All developers are strongly advised to update existing Struts 2 applications
	to Struts 2.3.7.
	</p>
	<p>
	Struts 2.3.7 is available in a full distribution,
	or as separate library, source, example and documentation
	distributions, from the
	<a href="http://struts.apache.org/download.cgi#struts237">releases page</a>.
	The release is also available through the central Maven repository under Group ID
	"org.apache.struts". The
	<a href="http://struts.apache.org/docs/version-notes-237.html">release notes</a>
	are available online.
	</p>
	<p>
	The 2.3.x series of the Apache Struts framework has a minimum
	requirement of the following specification versions: Servlet API 2.4,
	JSP API 2.0, and Java 5.
	</p>
	<p>
	Should any issues arise with your use of any version of the Struts
	framework, please post your comments to the user list, and, if
	appropriate, file a tracking ticket.
	</p>

	<h4 id="a20120813">13 August 2012 - Struts 2.3.4.1 General Availability Release</h4>
	<p>
	The Apache Struts group is pleased to announce that Struts 2.3.4.1 is
	available as a "General Availability" release. The GA designation is our
	highest quality grade.
	</p>
	<p>
	Apache Struts 2 is an elegant, extensible framework for creating
	enterprise-ready Java web applications. The framework is designed to
	streamline the full development cycle, from building, to deploying, to
	maintaining applications over time.
	</p>
	<p>
	Two security issues were solved with this release:
	<ul>
	<li>
	Decoupling of session attribute and parameter naming for Struts 2 token mechanism,
	to improve security when used for CSRF-attack protection
	</li>
	<li>
	Parameter name length is now by default restricted to 100 characters to diminish possible DOS
	attack effectiveness
	</li>
	</ul>
	</p>
	<p>
	All developers are strongly advised to update existing Struts 2 applications
	to Struts 2.3.4.1.
	</p>
	<p>
	Struts 2.3.4.1 is available in a full distribution,
	or as separate library, source, example and documentation
	distributions, from the
	<a href="http://struts.apache.org/download.cgi#struts2341">releases page</a>.
	The release is also available through the central Maven repository under Group ID
	"org.apache.struts". The
	<a href="http://struts.apache.org/docs/version-notes-2341.html">release notes</a>
	and the
	<a href="https://cwiki.apache.org/confluence/display/WW/S2-010">token mechanism security bulletin</a>
	as well as the
	<a href="https://cwiki.apache.org/confluence/display/WW/S2-011">parameter name length security bulletin</a>
	are available online.
	</p>
	<p>
	The 2.3.x series of the Apache Struts framework has a minimum
	requirement of the following specification versions: Servlet API 2.4,
	JSP API 2.0, and Java 5.
	</p>
	<p>
	Should any issues arise with your use of any version of the Struts
	framework, please post your comments to the user list, and, if
	appropriate, file a tracking ticket.
	</p>

	<h4 id="a20120511">12 May 2012 - Struts 2.3.4 General Availability Release</h4>
	<p>
	The Apache Struts group is pleased to announce that Struts 2.3.4 is
	available as a "General Availability" release. The GA designation is our
	highest quality grade.
	</p>
	<p>
	Apache Struts 2 is an elegant, extensible framework for creating
	enterprise-ready Java web applications. The framework is designed to
	streamline the full development cycle, from building, to deploying, to
	maintaining applications over time.
	</p>
	<p>
	It's a mostly maintenance release where many bugs were solved and many improvements were added.
	Please check the Version Notes to see more details.
	</p>
	<p>
	All developers are strongly advised to update existing Struts 2 applications
	to Struts 2.3.4.
	</p>
	<p>
	Struts 2.3.4 is available in a full distribution, or as separate library, source,
	example and documentation distributions, from the
	<a href="http://struts.apache.org/download.cgi#struts234">releases page</a>.
	The release is also available through the central Maven repository under Group ID
	"org.apache.struts". The
	<a href="http://struts.apache.org/docs/version-notes-234.html">version notes</a>
	are available online.
	</p>
	<p>
	The 2.3.x series of the Apache Struts framework has a minimum
	requirement of the following specification versions: Servlet API 2.4,
	JSP API 2.0, and Java 5.
	</p>
	<p>
	Should any issues arise with your use of any version of the Struts
	framework, please post your comments to the user list, and, if
	appropriate, file a tracking ticket.
	</p>

	<h4 id="a20120416">16 April 2012 - Struts 2.3.3 General Availability Release</h4>
	<p>
	The Apache Struts group is pleased to announce that Struts 2.3.3 is
	available as a "General Availability" release. The GA designation is our
	highest quality grade.
	</p>
	<p>
	Apache Struts 2 is an elegant, extensible framework for creating
	enterprise-ready Java web applications. The framework is designed to
	streamline the full development cycle, from building, to deploying, to
	maintaining applications over time.
	</p>
	<p>
	It's a mostly maintenance release where many bugs were solved and many improvements were added.
	Please check the Version Notes to see more details.
	</p>
	<p>
	All developers are strongly advised to update existing Struts 2 applications
	to Struts 2.3.3.
	</p>
	<p>
	Struts 2.3.3 is available in a full distribution, or as separate library, source,
	example and documentation distributions, from the
	<a href="http://struts.apache.org/download.cgi#struts233">releases page</a>.
	The release is also available through the central Maven repository under Group ID
	"org.apache.struts". The
	<a href="http://struts.apache.org/docs/version-notes-233.html">version notes</a>
	are available online.
	</p>
	<p>
	The 2.3.x series of the Apache Struts framework has a minimum
	requirement of the following specification versions: Servlet API 2.4,
	JSP API 2.0, and Java 5.
	</p>
	<p>
	Should any issues arise with your use of any version of the Struts
	framework, please post your comments to the user list, and, if
	appropriate, file a tracking ticket.
	</p>

	<h4 id="a20120122">22 January 2012 - Struts 2.3.1.2 General Availability Release</h4>
	<p>
	The Apache Struts group is pleased to announce that Struts 2.3.1.2 is
	available as a "General Availability" release. The GA designation is our
	highest quality grade.
	</p>
	<p>
	Apache Struts 2 is an elegant, extensible framework for creating
	enterprise-ready Java web applications. The framework is designed to
	streamline the full development cycle, from building, to deploying, to
	maintaining applications over time.
	</p>
	<p>
	An important vulnerability were solved with this release:
	<ul>
	<li>
	ParameterInterceptor vulnerability allowed remote command execution
	</li>
	<li>
	Default acceptedParamNames has been updated to more restrictive values
	</li>
	</ul>
	</p>
	<p>
	All developers are strongly advised to update existing Struts 2 applications
	to Struts 2.3.1.2.
	</p>
	<p>
	Struts 2.3.1.2 is available in a full distribution,
	or as separate library, source, example and documentation
	distributions, from the
	<a href="http://struts.apache.org/download.cgi#struts2312">releases page</a>.
	The release is also available through the central Maven repository under Group ID
	"org.apache.struts". The
	<a href="http://struts.apache.org/docs/version-notes-2312.html">release notes</a>
	and the
	<a href="https://cwiki.apache.org/confluence/display/WW/S2-009">security bulletin</a>
	are available online.
	</p>
	<p>
	The 2.3.x series of the Apache Struts framework has a minimum
	requirement of the following specification versions: Servlet API 2.4,
	JSP API 2.0, and Java 5.
	</p>
	<p>
	Should any issues arise with your use of any version of the Struts
	framework, please post your comments to the user list, and, if
	appropriate, file a tracking ticket.
	</p>

	<p class="pull-right">
	Skip to: <a href="announce-2011.html">Announcements - 2011</a>
	</p>

	<p class="pull-left">
	<strong>Next:</strong>
	<a href="kickstart.html">Kickstart FAQ</a>
	</p>

	</section>
	</article>


	<footer class="container">
	<div class="col-md-12">
	Copyright © 2000-2022 <a href="https://www.apache.org/">The Apache Software Foundation</a>.
	Apache Struts, Struts, Apache, the Apache feather logo, and the Apache Struts project logos are
	trademarks of The Apache Software Foundation. All Rights Reserved.
	</div>
	<div class="col-md-12">Logo and website design donated by <a href="https://softwaremill.com/">SoftwareMill</a>.</div>
	</footer>

	<script>!function (d, s, id) {
	var js, fjs = d.getElementsByTagName(s)[0];
	if (!d.getElementById(id)) {
	js = d.createElement(s);
	js.id = id;
	js.src = "//platform.twitter.com/widgets.js";
	fjs.parentNode.insertBefore(js, fjs);
	}
	}(document, "script", "twitter-wjs");</script>
	<script src="https://apis.google.com/js/platform.js" async="async" defer="defer"></script>

	<div id="fb-root"></div>

	<script>(function (d, s, id) {
	var js, fjs = d.getElementsByTagName(s)[0];
	if (d.getElementById(id)) return;
	js = d.createElement(s);
	js.id = id;
	js.src = "//connect.facebook.net/en_GB/all.js#xfbml=1";
	fjs.parentNode.insertBefore(js, fjs);
	}(document, 'script', 'facebook-jssdk'));</script>


	</body>
	</html>