Re: [EXTERNAL] Re: Question Regarding Recent Security Announcement

pon., 5 lis 2018 o 13:33 David Dillard napisał(a): > > Ok, that addresses one question, but still leaves one: why is it being > recommended to update File Upload NOW due to a possible DoS, when Struts has > been using a version of File Upload with no documented DoS issue for the last > six rele

RE: [EXTERNAL] Re: Question Regarding Recent Security Announcement

stion Regarding Recent Security Announcement niedz., 4 lis 2018 o 18:40 David Dillard napisał(a): > 1. Per the Maven repository, Struts 2.3.36 recommends Fileupload 1.3.2 be > used<https://mvnrepository.com/artifact/org.apache.struts/struts2-core/2.3.36>, > not 1.3.3, so I

Re: Question Regarding Recent Security Announcement

niedz., 4 lis 2018 o 18:40 David Dillard napisał(a): > 1. Per the Maven repository, Struts 2.3.36 recommends Fileupload 1.3.2 be > used, > not 1.3.3, so I'm confused about what's stated in the email. What's > recommen

RE: Question Regarding Recent Security Announcement

Hi David, That was a typo which already has fixed and re-announced. We meant 1.3.3. Thanks for your email. Regards. >-Original Message- >From: David Dillard >Sent: Sunday, November 4, 2018 9:10 PM >To: user@struts.apache.org >Subject: Question Regarding Recent Security Announcement > >