Author: lukaszlenart
Date: Thu Apr 24 15:19:38 2014
New Revision: 1589766
URL: http://svn.apache.org/r1589766
Log:
Updates HerUnit with 0-day mitigation
Modified:
struts/site/trunk/content/index.html
struts/site/trunk/source/index.html
Modified: struts/site/trunk/content/index.html
URL:
http://svn.apache.org/viewvc/struts/site/trunk/content/index.html?rev=1589766&r1=1589765&r2=1589766&view=diff
==============================================================================
--- struts/site/trunk/content/index.html (original)
+++ struts/site/trunk/content/index.html Thu Apr 24 15:19:38 2014
@@ -129,9 +129,9 @@
<a
href="http://struts.apache.org/release/2.3.x/docs/version-notes-23161.html";>Version
notes</a>
</div>
<div class="col-md-4">
- <h2>Immediately upgrade commons-fileupload!</h2>
- <p>This is necessary to prevent your publicly accessible web site from
being exposed to
- possible DoS attacks, <a href="announce.html#a20140221">read more</a>
+ <h2>Struts up to 2.3.16.1: Zero-Day Exploit Mitigation!</h2>
+ <p>In Struts 2.3.16.1, an issue with ClassLoader manipulation via
request parameters was supposed to be resolved. Unfortunately,
+ the correction wasn't sufficient, <a
href="announce.html#a20140424">read more</a>
</p>
</div>
<div class="col-md-4">
Modified: struts/site/trunk/source/index.html
URL:
http://svn.apache.org/viewvc/struts/site/trunk/source/index.html?rev=1589766&r1=1589765&r2=1589766&view=diff
==============================================================================
--- struts/site/trunk/source/index.html (original)
+++ struts/site/trunk/source/index.html Thu Apr 24 15:19:38 2014
@@ -26,9 +26,9 @@ title: Welcome to the Apache Struts proj
<a href="http://struts.apache.org/release/2.3.x/docs/version-notes-{{
site.current_version_short }}.html">Version notes</a>
</div>
<div class="col-md-4">
- <h2>Immediately upgrade commons-fileupload!</h2>
- <p>This is necessary to prevent your publicly accessible web site from
being exposed to
- possible DoS attacks, <a href="announce.html#a20140221">read more</a>
+ <h2>Struts up to 2.3.16.1: Zero-Day Exploit Mitigation!</h2>
+ <p>In Struts 2.3.16.1, an issue with ClassLoader manipulation via
request parameters was supposed to be resolved. Unfortunately,
+ the correction wasn't sufficient, <a
href="announce.html#a20140424">read more</a>
</p>
</div>
<div class="col-md-4">
