Re: New Struts 2.5.x release

2021-10-13 Thread Lukasz Lenart
sob., 9 paź 2021 o 07:10 James Chaplin napisał(a): > > Hi Łukasz. > > Thanks for putting the list together for 2.5.27 changes. Beyond what has > already been discussed in other replies, the only other potential for 2.5.27 > that I noticed was WW 5129 / PR 495. > > It looks like PR 495 still

Re: New Struts 2.5.x release

2021-10-08 Thread James Chaplin
Hi Łukasz. Thanks for putting the list together for 2.5.27 changes. Beyond what has already been discussed in other replies, the only other potential for 2.5.27 that I noticed was WW 5129 / PR 495. It looks like PR 495 still has changes requested/discussion going on, so I am thinking it

Re: New Struts 2.5.x release

2021-10-03 Thread Lukasz Lenart
niedz., 3 paź 2021 o 14:27 Yasser Zamani napisał(a): > > Thanks! yes my PR is missing and in my opinion still it's not clear and > there's no proof for me that why we shouldn't include those improvements! I didn't include it because I have large concerns (already commented on the PR) and it

Re: New Struts 2.5.x release

2021-10-03 Thread Lukasz Lenart
niedz., 3 paź 2021 o 11:16 i...@flyingfischer.ch napisał(a): > > Hi Łukasz > > any reason why we cannot use XStream 1.4.18 instead of version version > 1.4.16? > > There seem to be a bunch of recent CVEs fixed in 1.4.18, released on the > August 22, 2021 > > http://x-stream.github.io/ > > As far

Re: New Struts 2.5.x release

2021-10-03 Thread Yasser Zamani
Thanks! yes my PR is missing and in my opinion still it's not clear and there's no proof for me that why we shouldn't include those improvements! Regards. On 10/3/2021 11:41 AM, Lukasz Lenart wrote: > I'm ready to prepare a test build for 2.5.27, here is the list of changes: >

Re: New Struts 2.5.x release

2021-10-03 Thread Lukasz Lenart
I'm ready to prepare a test build for 2.5.27, here is the list of changes: https://issues.apache.org/jira/projects/WW/versions/12349611 Let me know if something is missing. Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ pon., 20 wrz 2021 o 16:13 i...@flyingfischer.ch napisał(a):

Re: New Struts 2.5.x release

2021-09-20 Thread i...@flyingfischer.ch
+1 Am 20.09.21 um 15:59 schrieb Dave Newton: +1 On Mon, Sep 20, 2021 at 1:25 AM Lukasz Lenart wrote: Hi, I would like to release the last 2.5.x version and focus on Struts 2.6. All the PRs that are targeting Struts 2.5.x should be re-targeted to Struts 2.6 (the master branch) and we

Re: New Struts 2.5.x release

2021-09-20 Thread Dave Newton
+1 On Mon, Sep 20, 2021 at 1:25 AM Lukasz Lenart wrote: > Hi, > > I would like to release the last 2.5.x version and focus on Struts > 2.6. All the PRs that are targeting Struts 2.5.x should be re-targeted > to Struts 2.6 (the master branch) and we should only accept security > fixes to 2.5