Passes all my test with my 2.5.x code base.  (although 2.3.x does not like
the strict-method-invocation, global-allowed-methods and allowed-methods
attributes which I must comment out from my struts.xml for it to work)

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[x] General Availability (GA)

+1 (b)

On 12 July 2016 at 06:37, Lukasz Lenart <lukaszlen...@apache.org> wrote:

> The Apache Struts 2.3.30 test build is now available. With this release:
>
> [WW-4641] - CVE-2016-0785
> [WW-4642] - Unable to retrieve s:hidden field values
> [WW-4645] - SecurityMemberAccess exclude class design issue
> [WW-4651] - Negative number is considered an arithmetic expression
> [WW-4648] - Upgrade commons-fileupload to the latest version
>
> also this version uses the latest OGNL 3.0.x series which doesn't
> allow modify `_memeberAccess` via a key plus doesn't treat negative
> numbers as an expression
> https://github.com/jkuhnert/ognl#release-notes---version-3110-3019
>
> Release notes
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.30
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.3.30/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Ɓukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Reply via email to