Thank you Michael for the response, this is all I wanted to confirm. 

Jawad Rajput 
System Administrator
U.S. Department of Energy 
IM-62 /Germantown Building
HQ Network Security Team
Email: jawad.raj...@hq.doe.gov
Office: 301-903-2176
Office: 301-903-3895
Cell: 301-795-5406



-----Original Message-----
From: spacewalk-devel-boun...@redhat.com 
[mailto:spacewalk-devel-boun...@redhat.com] On Behalf Of Michael Mraka
Sent: Monday, March 25, 2019 5:26 AM
To: spacewalk-devel@redhat.com
Subject: [EXTERNAL] Re: [Spacewalk-devel] Struts 1.x v1.3 (Apache Software 
Foundation, The)

Rajput, Jawad (CONTR):
> Good Afternoon.
> 
> I have a question about Struts 1.x v1.3 (Apache Software Foundation, The). We 
> are running Spacewalk 2.9 and during software audit we found Spacewalk 2.9 is 
> running struts-1.3.10-18.sw.noarch which has already been EOL. I am wondering 
> if it possible to confirm if the Struts is backported or can it be updated to 
> supported version? Please advise. 

Hello Jawad,

Spacewalk uses struts v1.x. We know it's been EOLed and we follow and
fix possible CVEs. It isn't possible to upgrade to struts v2 because of
different API.

> - Jawad 

Regards,

--
Michael Mráka
System Management Engineering, Red Hat

_______________________________________________
Spacewalk-devel mailing list
Spacewalk-devel@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-devel

********************************************************************
This message does not originate from a known Department of Energy email system.
Use caution if this message contains attachments, links or requests for 
information. 
 
********************************************************************


_______________________________________________
Spacewalk-devel mailing list
Spacewalk-devel@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-devel

Reply via email to