Struts 2.3.X Impacted by S2-055?

2017-12-09 Thread infosec
It looks like the Jackson-databind issue is only associated with 2.5.X versions of Struts. I just want to confirm that 2.3.X versions are not. Thanks, Adrian - To unsubscribe, e-mail: user-unsubscr...@struts.apache.org For a

Struts 2.3.X Impacted by S2-055?

2017-12-09 Thread infosec
It looks like the Jackson-databind issue is only associated with 2.5.X versions of Struts. I just want to confirm that 2.3.X versions are not. Thanks, Adrian - To unsubscribe, e-mail: user-unsubscr...@struts.apache.org For a

Unable to use 'categories' in an action name

2017-12-09 Thread Dave Weis
I hope this is something simple I've missed. I am unable to use the word 'categories' as an action name inside a package. Duplicating the action definition with a different name works fine. I've reproduced it as far as I can understand but there is something else going on. Relevant struts config a