This is an automated email from the ASF dual-hosted git repository. git-site-role pushed a commit to branch asf-site in repository https://gitbox.apache.org/repos/asf/struts-site.git
The following commit(s) were added to refs/heads/asf-site by this push: new 85d3a2c Updates production by Jenkins 85d3a2c is described below commit 85d3a2c9903bff2f04cc935a749ac180861a059e Author: jenkins <bui...@apache.org> AuthorDate: Mon Oct 15 07:00:49 2018 +0000 Updates production by Jenkins --- content/announce.html | 26 +++++++++++++++++++++++++ content/download.html | 54 +++++++++++++++++++++++++-------------------------- content/index.html | 8 ++++---- content/releases.html | 11 +++++++++++ 4 files changed, 68 insertions(+), 31 deletions(-) diff --git a/content/announce.html b/content/announce.html index f912bad..ea06c3f 100644 --- a/content/announce.html +++ b/content/announce.html @@ -130,6 +130,7 @@ <h1 class="no_toc" id="announcements-2018">Announcements 2018</h1> <ul id="markdown-toc"> + <li><a href="#a20181015-2" id="markdown-toc-a20181015-2">15 October 2018 - Struts 2.3.36 General Availability</a></li> <li><a href="#a20181015-1" id="markdown-toc-a20181015-1">15 October 2018 - Struts 2.5.18 General Availability</a></li> <li><a href="#a20180822-0" id="markdown-toc-a20180822-0">22 August 2018 - CVE-2018-11776 Apache Struts 2.3 to 2.3.34 and 2.5 to 2.5.16</a></li> <li><a href="#a20180822-1" id="markdown-toc-a20180822-1">22 August 2018 - Struts 2.5.17 General Availability</a></li> @@ -143,6 +144,31 @@ Skip to: <a href="announce-2017.html">Announcements - 2017</a> </p> +<h4 id="a20181015-2">15 October 2018 - Struts 2.3.36 General Availability</h4> + +<p>The Apache Struts group is pleased to announce that Struts 2.3.36 is available as a “General Availability” +release. The GA designation is our highest quality grade.</p> + +<p>This release addresses one backward compatibility issue:</p> + +<ul> + <li><a href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.36">xml-validation fails since struts 2.5.17</a></li> +</ul> + +<p>Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. +The framework is designed to streamline the full development cycle, from building, to deploying, +to maintaining applications over time.</p> + +<p><strong>All developers are strongly advised to perform this action.</strong></p> + +<p>The 2.3.x series of the Apache Struts framework has a minimum requirement of the following specification versions: +Servlet API 2.4, JSP API 2.0, and Java 6.</p> + +<p>Should any issues arise with your use of any version of the Struts framework, please post your comments +to the user list, and, if appropriate, file a tracking ticket.</p> + +<p>You can download this version from our <a href="download.cgi#struts-23x">download</a> page.</p> + <h4 id="a20181015-1">15 October 2018 - Struts 2.5.18 General Availability</h4> <p>The Apache Struts group is pleased to announce that Struts 2.5.18 is available as a “General Availability” diff --git a/content/download.html b/content/download.html index 2e92ec7..f010df2 100644 --- a/content/download.html +++ b/content/download.html @@ -208,7 +208,7 @@ <li> <a href="[preferred]struts/2.5.18/struts-2.5.18-all.zip">struts-2.5.18-all.zip</a> (65MB) [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-all.zip.asc">PGP</a>] - [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-all.zip.md5">MD5</a>] + [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-all.zip.sha256">SHA256</a>] </li> </ul> </li> @@ -218,7 +218,7 @@ <li> <a href="[preferred]struts/2.5.18/struts-2.5.18-apps.zip">struts-2.5.18-apps.zip</a> (35MB) [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-apps.zip.asc">PGP</a>] - [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-apps.zip.md5">MD5</a>] + [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-apps.zip.sha256">SHA256</a>] </li> </ul> </li> @@ -228,7 +228,7 @@ <li> <a href="[preferred]struts/2.5.18/struts-2.5.18-min-lib.zip">struts-2.5.18-min-lib.zip</a> (4MB) [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-min-lib.zip.asc">PGP</a>] - [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-min-lib.zip.md5">MD5</a>] + [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-min-lib.zip.sha256">SHA256</a>] </li> </ul> </li> @@ -238,7 +238,7 @@ <li> <a href="[preferred]struts/2.5.18/struts-2.5.18-lib.zip">struts-2.5.18-lib.zip</a> (19MB) [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-lib.zip.asc">PGP</a>] - [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-lib.zip.md5">MD5</a>] + [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-lib.zip.sha256">SHA256</a>] </li> </ul> </li> @@ -248,7 +248,7 @@ <li> <a href="[preferred]struts/2.5.18/struts-2.5.18-docs.zip">struts-2.5.18-docs.zip</a> (13MB) [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-docs.zip.asc">PGP</a>] - [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-docs.zip.md5">MD5</a>] + [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-docs.zip.sha256">SHA256</a>] </li> </ul> </li> @@ -258,26 +258,26 @@ <li> <a href="[preferred]struts/2.5.18/struts-2.5.18-src.zip">struts-2.5.18-src.zip</a> (7MB) [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-src.zip.asc">PGP</a>] - [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-src.zip.md5">MD5</a>] + [<a href="https://www.apache.org/dist/struts/2.5.18/struts-2.5.18-src.zip.sha256">SHA256</a>] </li> </ul> </li> </ul> -<h3 id="struts-23x">Struts 2.3.35</h3> +<h3 id="struts-23x">Struts 2.3.36</h3> <ul> <li> - <a href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.35">Version Notes</a> + <a href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.36">Version Notes</a> </li> <li>Full Distribution: <ul> <li> - <a href="[preferred]struts/2.3.35/struts-2.3.35-all.zip">struts-2.3.35-all.zip</a> (65MB) - [<a href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-all.zip.asc">PGP</a>] - [<a href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-all.zip.md5">MD5</a>] + <a href="[preferred]struts/2.3.36/struts-2.3.36-all.zip">struts-2.3.36-all.zip</a> (65MB) + [<a href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-all.zip.asc">PGP</a>] + [<a href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-all.zip.sha256">SHA256</a>] </li> </ul> </li> @@ -285,9 +285,9 @@ <li>Example Applications: <ul> <li> - <a href="[preferred]struts/2.3.35/struts-2.3.35-apps.zip">struts-2.3.35-apps.zip</a> (35MB) - [<a href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-apps.zip.asc">PGP</a>] - [<a href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-apps.zip.md5">MD5</a>] + <a href="[preferred]struts/2.3.36/struts-2.3.36-apps.zip">struts-2.3.36-apps.zip</a> (35MB) + [<a href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-apps.zip.asc">PGP</a>] + [<a href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-apps.zip.sha256">SHA256</a>] </li> </ul> </li> @@ -295,9 +295,9 @@ <li>Essential Dependencies Only: <ul> <li> - <a href="[preferred]struts/2.3.35/struts-2.3.35-min-lib.zip">struts-2.3.35-min-lib.zip</a> (4MB) - [<a href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-min-lib.zip.asc">PGP</a>] - [<a href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-min-lib.zip.md5">MD5</a>] + <a href="[preferred]struts/2.3.36/struts-2.3.36-min-lib.zip">struts-2.3.36-min-lib.zip</a> (4MB) + [<a href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-min-lib.zip.asc">PGP</a>] + [<a href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-min-lib.zip.sha256">SHA256</a>] </li> </ul> </li> @@ -305,9 +305,9 @@ <li>All Dependencies: <ul> <li> - <a href="[preferred]struts/2.3.35/struts-2.3.35-lib.zip">struts-2.3.35-lib.zip</a> (19MB) - [<a href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-lib.zip.asc">PGP</a>] - [<a href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-lib.zip.md5">MD5</a>] + <a href="[preferred]struts/2.3.36/struts-2.3.36-lib.zip">struts-2.3.36-lib.zip</a> (19MB) + [<a href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-lib.zip.asc">PGP</a>] + [<a href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-lib.zip.sha256">SHA256</a>] </li> </ul> </li> @@ -315,9 +315,9 @@ <li>Documentation: <ul> <li> - <a href="[preferred]struts/2.3.35/struts-2.3.35-docs.zip">struts-2.3.35-docs.zip</a> (13MB) - [<a href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-docs.zip.asc">PGP</a>] - [<a href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-docs.zip.md5">MD5</a>] + <a href="[preferred]struts/2.3.36/struts-2.3.36-docs.zip">struts-2.3.36-docs.zip</a> (13MB) + [<a href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-docs.zip.asc">PGP</a>] + [<a href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-docs.zip.sha256">SHA256</a>] </li> </ul> </li> @@ -325,9 +325,9 @@ <li>Source: <ul> <li> - <a href="[preferred]struts/2.3.35/struts-2.3.35-src.zip">struts-2.3.35-src.zip</a> (7MB) - [<a href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-src.zip.asc">PGP</a>] - [<a href="https://www.apache.org/dist/struts/2.3.35/struts-2.3.35-src.zip.md5">MD5</a>] + <a href="[preferred]struts/2.3.36/struts-2.3.36-src.zip">struts-2.3.36-src.zip</a> (7MB) + [<a href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-src.zip.asc">PGP</a>] + [<a href="https://www.apache.org/dist/struts/2.3.36/struts-2.3.36-src.zip.sha256">SHA256</a>] </li> </ul> </li> @@ -475,7 +475,7 @@ <h2 id="verify">Verify the integrity of the files</h2> <p> - We recommend that you verify the integrity of the downloaded files using the PGP or MD5 signatures. + We recommend that you verify the integrity of the downloaded files using the PGP or MD5/SHA256 signatures. </p> <p> diff --git a/content/index.html b/content/index.html index 1c114c8..f88e773 100644 --- a/content/index.html +++ b/content/index.html @@ -159,11 +159,11 @@ <a href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.18">Version notes</a> </div> <div class="column col-md-4"> - <h2>Apache Struts 2.3.35 GA</h2> + <h2>Apache Struts 2.3.36 GA</h2> <p> It's the latest release of Struts 2.3.x which contains the latest security fixes, - released on 22 August 2018.<br/> Read more in <a href="announce.html#a20180822-2">Announcement</a> or in - <a href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.35">Version notes</a> + released on 15 October 2018.<br/> Read more in <a href="announce.html#a20181015-2">Announcement</a> or in + <a href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.36">Version notes</a> </p> </div> </div> @@ -187,7 +187,7 @@ </p> </div> <div class="column col-md-4"> - <h2>Immediately upgrade to version 2.5.18 or 2.3.35</h2> + <h2>Immediately upgrade to version 2.5.18 or 2.3.36</h2> <p> The Apache Security Struts Team recommends to immediately upgrade your Struts 2 based projects to use the latest released version of the Apache Struts to prevent possible RCE attack when using results with no namespace, diff --git a/content/releases.html b/content/releases.html index 7d75eeb..1163aa0 100644 --- a/content/releases.html +++ b/content/releases.html @@ -242,6 +242,17 @@ </tr> <tr> <td class="no-wrap"> + Struts 2.3.35 + </td> + <td class="no-wrap">22 August 2018</td> + <td> + </td> + <td> + <a href="https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.35">Version notes</a> + </td> + </tr> + <tr> + <td class="no-wrap"> Struts 2.5.16 </td> <td class="no-wrap">16 March 2018</td>