Thank you Michael for the response, this is all I wanted to confirm. 

Jawad Rajput 
System Administrator
U.S. Department of Energy 
IM-62 /Germantown Building
HQ Network Security Team
Office: 301-903-2176
Office: 301-903-3895
Cell: 301-795-5406

-----Original Message-----
[] On Behalf Of Michael Mraka
Sent: Monday, March 25, 2019 5:26 AM
Subject: [EXTERNAL] Re: [Spacewalk-devel] Struts 1.x v1.3 (Apache Software 
Foundation, The)

Rajput, Jawad (CONTR):
> Good Afternoon.
> I have a question about Struts 1.x v1.3 (Apache Software Foundation, The). We 
> are running Spacewalk 2.9 and during software audit we found Spacewalk 2.9 is 
> running struts-1.3.10-18.sw.noarch which has already been EOL. I am wondering 
> if it possible to confirm if the Struts is backported or can it be updated to 
> supported version? Please advise. 

Hello Jawad,

Spacewalk uses struts v1.x. We know it's been EOLed and we follow and
fix possible CVEs. It isn't possible to upgrade to struts v2 because of
different API.

> - Jawad 


Michael Mráka
System Management Engineering, Red Hat

Spacewalk-devel mailing list

This message does not originate from a known Department of Energy email system.
Use caution if this message contains attachments, links or requests for 

Spacewalk-devel mailing list

Reply via email to