[S1] Tag library validation failures

2007-09-05 Thread Antonio Petrelli
Hi all! I noticed that the tag library validation reports for struts-taglib and struts-el contain some errors: http://struts.apache.org/1.3.9/struts-taglib/taglibvalidation.html http://struts.apache.org/1.3.9/struts-el/taglibvalidation.html#struts-tiles-el.tld Is it a known problem with the Maven p

Badly worded security alert ( FrSIRT/ADV-2007-3042)

2007-09-05 Thread Ted Husted
The recent alert posted at * http://www.frsirt.com/english/advisories/2007/3042 says that all versions of Apache Struts prior to 2.0.9 are affected by the "Apache Struts XWork Form Object-Graph Navigation Language Code Execution" issue. Of course, this is not the case. No version of Struts 1.x

Re: Hold 2.0.10

2007-09-05 Thread Ted Husted
So, if everyone is good to go on Struts 2.0.10, I could roll it Sunday night (9 Sep). -Ted. http://husted.com/ted/blog/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]