svn commit: r384109 - /struts/action/branches/STRUTS_1_2_BRANCH/doc/userGuide/release-notes.xml

[niallp]

Author: niallp
Date: Tue Mar  7 19:33:42 2006
New Revision: 384109

URL: http://svn.apache.org/viewcvs?rev=384109&view=rev
Log:
Update release notes

Modified:
    struts/action/branches/STRUTS_1_2_BRANCH/doc/userGuide/release-notes.xml

Modified: 
struts/action/branches/STRUTS_1_2_BRANCH/doc/userGuide/release-notes.xml
URL: 
http://svn.apache.org/viewcvs/struts/action/branches/STRUTS_1_2_BRANCH/doc/userGuide/release-notes.xml?rev=384109&r1=384108&r2=384109&view=diff
==============================================================================
--- struts/action/branches/STRUTS_1_2_BRANCH/doc/userGuide/release-notes.xml 
(original)
+++ struts/action/branches/STRUTS_1_2_BRANCH/doc/userGuide/release-notes.xml 
Tue Mar  7 19:33:42 2006
@@ -7,6 +7,18 @@
  <chapter name="6.1 Release Notes - Version 1.2.9" href="release_notes">
       <section name="Introduction" href="Introduction">
           <p>
+              The main motivation for releasing Struts 1.2.9 is to fix three
+              security issues which have been identified:
+          </p>
+          <ul>
+              <li><a 
href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38374";>Bug 38374</a> - 
+                  Validation always skipped with Globals.CANCEL_KEY.</li>
+              <li><a 
href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38534";>Bug 38534</a> - 
+                  DOS attack, application hack.</li>
+              <li><a 
href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38749";>Bug 38749</a> - 
+                  XSS vulnerability in LookupDispatchAction.</li>
+          </ul>
+          <p>
               This section contains release notes for changes that have taken
               place since
               <a href="release-notes-1.2.8.html">Version 1.2.8</a>.
@@ -39,6 +51,13 @@
              <thead><tr>
                  
<th>Modification</th><th>Revision</th><th>Bugzilla</th><th>Description</th>
              </tr></thead>
+             <tr>
+                 <td align="center">2006-03-08</td>
+                 <td align="center"><a 
href="http://svn.apache.org/viewcvs.cgi?rev=384090&amp;view=rev";>384090</a>
+                     (<a 
href="http://svn.apache.org/viewcvs?rev=384092&amp;view=rev";>384092</a>)</td>
+                 <td align="center"><a 
href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38343";>38343</a></td>
+                 <td>Add EventDispatchAction and EventActionDispatcher.</td>
+             </tr>
              <tr>
                  <td align="center">2006-03-07</td>
                  <td align="center"><a 
href="http://svn.apache.org/viewcvs.cgi?rev=383907&amp;view=rev";>383907</a>



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]