Author: rgielen
Date: Tue Jul 16 08:28:17 2013
New Revision: 1503605
URL: http://svn.apache.org/r1503605
Log:
2.3.15.1 release announcement improved
Modified:
struts/site/trunk/content/xdoc/announce.xml
Modified: struts/site/trunk/content/xdoc/announce.xml
URL:
http://svn.apache.org/viewvc/struts/site/trunk/content/xdoc/announce.xml?rev=1503605&r1=1503604&r2=1503605&view=diff
==============================================================================
--- struts/site/trunk/content/xdoc/announce.xml (original)
+++ struts/site/trunk/content/xdoc/announce.xml Tue Jul 16 08:28:17 2013
@@ -30,7 +30,7 @@ limitations under the License.
<a href="announce-2012.html">Announcements - 2012</a>
</p>
- <h4 id="a20130716">16 July 2013 - Struts 2.3.15.1 General
Availability Release</h4>
+ <h4 id="a20130716">16 July 2013 - Struts 2.3.15.1 General
Availability Release - Security Fix Release</h4>
<p>
The Apache Struts group is pleased to announce that Struts
2.3.15.1 is
available as a "General Availability" release. The GA
designation is our
@@ -46,11 +46,13 @@ limitations under the License.
Two security issues were solved with this release:
<ul>
<li>
- Remote code execution vulnerability when using
short-circuit navigation
+ <a
href="http://struts.apache.org/release/2.3.x/docs/s2-016.html";>S2-016</a>
+ - Remote code execution vulnerability when using
short-circuit navigation
parameter prefixes
</li>
<li>
- Open redirect vulnerability when using short-circuit
redirect
+ <a
href="http://struts.apache.org/release/2.3.x/docs/s2-017.html";>S2-017</a>
+ - Open redirect vulnerability when using short-circuit
redirect
parameter prefixes
</li>
</ul>
