2017-07-18 8:29 GMT+02:00 i...@flyingfischer.ch <i...@flyingfischer.ch>:
> I didn't want to open an "issue" in Jira, since I do not know, if it is
> worth considering upgrading Commons-IO:
>
> Commons-IO has version 2.5 with quite a lot of bug corrections. No
> mention of vulnis fixed though. Binary, source and semantic compatible
> with 2.4.
>
> https://commons.apache.org/proper/commons-io/upgradeto2_5.html
>
> Runs fine here since a long time. Maybe an option for Struts 2.5.13

I think it makes sense as there is also a task to upgrade Commons
Collections :) Please register a ticket :)


Regards
-- 
Ɓukasz
+ 48 606 323 122 http://www.lenart.org.pl/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org

Reply via email to