Re: [ANN] [APACHE STRUTS] Security Bulletin S2-055: impact increased to High (related to CVE-2017-7525 - JSON Jackson library)

2017-12-12 Thread Lukasz Lenart
2017-12-12 16:22 GMT+01:00 upendar devu : > could someone please confirm what Jackson databind versions are impacted ? > we are using 2.7.1 version . Here is a list [1] of unimpacted versions, which means any other are impacted [1] https://github.com/FasterXML/jackson-databind/issues/1599#issuec

Re: [ANN] [APACHE STRUTS] Security Bulletin S2-055: impact increased to High (related to CVE-2017-7525 - JSON Jackson library)

2017-12-12 Thread upendar devu
could someone please confirm what Jackson databind versions are impacted ? we are using 2.7.1 version . On Tue, Dec 12, 2017 at 9:45 AM, Lukasz Lenart wrote: > 2017-12-12 15:29 GMT+01:00 Emi : > > Hello, > >> > >> vulnerability exists in a JSON Jackson library and it's registered under > >> CVE-

Re: Unable to use 'categories' in an action name

2017-12-12 Thread Dave Weis
Thank you so much for your help - I appreciate it. I ended up just renaming the action and corrected the other pages pointing to it. dave On Sun, Dec 10, 2017 at 11:56 PM, Yasser Zamani wrote: > > > On 12/10/2017 6:06 PM, Dave Weis wrote: > > Correct, I want 'categories' to be the correct act

Re: [ANN] [APACHE STRUTS] Security Bulletin S2-055: impact increased to High (related to CVE-2017-7525 - JSON Jackson library)

2017-12-12 Thread Lukasz Lenart
2017-12-12 15:29 GMT+01:00 Emi : > Hello, >> >> vulnerability exists in a JSON Jackson library and it's registered under >> CVE-2017-7525. > > I think you mean the following jars right? > > (1) jackson-core-2.9.2.jar > (2) jackson-annotations-2.9.0.jar > (3) jackson-databind-2.9.2.jar I didn't ana

Re: [ANN] [APACHE STRUTS] Security Bulletin S2-055: impact increased to High (related to CVE-2017-7525 - JSON Jackson library)

2017-12-12 Thread Emi
Hello, vulnerability exists in a JSON Jackson library and it's registered under CVE-2017-7525. I think you mean the following jars right? (1) jackson-core-2.9.2.jar (2) jackson-annotations-2.9.0.jar (3) jackson-databind-2.9.2.jar Please read the bulletin [1] and apply possible solutions. This