Incidentally, the wiki points out that 2.3 is vulnerable, but http://struts.apache.org/docs/s2-052.html still only states 2.5.
On Wed, Sep 6, 2017 at 10:15 AM Lukasz Lenart <lukaszlen...@apache.org> wrote: > 2017-09-06 16:12 GMT+02:00 Emi <em...@encs.concordia.ca>: > > Hello, > >> > >> I finally read your email where you gave the dist URL for the dev > release. > > > > This is the release that I should use for 2.3 right? > > > > https://dist.apache.org/repos/dist/dev/struts/2.3.34/ > > Yes, it should be officially released and announced soon > > > Regards > -- > Ćukasz > + 48 606 323 122 <+48%20606%20323%20122> http://www.lenart.org.pl/ > > --------------------------------------------------------------------- > To unsubscribe, e-mail: user-unsubscr...@struts.apache.org > For additional commands, e-mail: user-h...@struts.apache.org > >