Announcements - 2012
Skip to: Announcements - 2011
22 December 2012 - Struts 2.3.8 General Availability Release
The Apache Struts group is pleased to announce that Struts 2.3.8 is available as a "General Availability" release. The GA designation is our highest quality grade.
Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed to streamline the full development cycle, from building, to deploying, to maintaining applications over time.
It's a mostly maintenance release which improves overall performance which should be significant better than in version 2.3.7 and slightly better than in version 2.3.4.1. This version depends on new OGNL version 3.0.6 - thanks to Pelladi Gabor and Johno Crawford for their contribution! Please check the Version Notes to see more details.
All developers are strongly advised to update existing Struts 2 applications to Struts 2.3.8.
Struts 2.3.8 is available in a full distribution or as separate library, source, example and documentation distributions, from the releases page. The release is also available through the central Maven repository under Group ID "org.apache.struts". The release notes are available online.
The 2.3.x series of the Apache Struts framework has a minimum requirement of the following specification versions: Servlet API 2.4, JSP API 2.0, and Java 5.
Should any issues arise with your use of any version of the Struts framework, please post your comments to the user list, and, if appropriate, file a tracking ticket.
19 November 2012 - Struts 2.3.7 General Availability Release
The Apache Struts group is pleased to announce that Struts 2.3.7 is available as a "General Availability" release. The GA designation is our highest quality grade.
Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed to streamline the full development cycle, from building, to deploying, to maintaining applications over time.
It's a mostly maintenance release where many bugs were solved and many improvements were added. Please check the Version Notes to see more details, also performance was improved.
All developers are strongly advised to update existing Struts 2 applications to Struts 2.3.7.
Struts 2.3.7 is available in a full distribution, or as separate library, source, example and documentation distributions, from the releases page. The release is also available through the central Maven repository under Group ID "org.apache.struts". The release notes are available online.
The 2.3.x series of the Apache Struts framework has a minimum requirement of the following specification versions: Servlet API 2.4, JSP API 2.0, and Java 5.
Should any issues arise with your use of any version of the Struts framework, please post your comments to the user list, and, if appropriate, file a tracking ticket.
13 August 2012 - Struts 2.3.4.1 General Availability Release
The Apache Struts group is pleased to announce that Struts 2.3.4.1 is available as a "General Availability" release. The GA designation is our highest quality grade.
Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed to streamline the full development cycle, from building, to deploying, to maintaining applications over time.
Two security issues were solved with this release:
- Decoupling of session attribute and parameter naming for Struts 2 token mechanism, to improve security when used for CSRF-attack protection
- Parameter name length is now by default restricted to 100 characters to diminish possible DOS attack effectiveness
All developers are strongly advised to update existing Struts 2 applications to Struts 2.3.4.1.
Struts 2.3.4.1 is available in a full distribution, or as separate library, source, example and documentation distributions, from the releases page. The release is also available through the central Maven repository under Group ID "org.apache.struts". The release notes and the token mechanism security bulletin as well as the parameter name length security bulletin are available online.
The 2.3.x series of the Apache Struts framework has a minimum requirement of the following specification versions: Servlet API 2.4, JSP API 2.0, and Java 5.
Should any issues arise with your use of any version of the Struts framework, please post your comments to the user list, and, if appropriate, file a tracking ticket.
12 May 2012 - Struts 2.3.4 General Availability Release
The Apache Struts group is pleased to announce that Struts 2.3.4 is available as a "General Availability" release. The GA designation is our highest quality grade.
Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed to streamline the full development cycle, from building, to deploying, to maintaining applications over time.
It's a mostly maintenance release where many bugs were solved and many improvements were added. Please check the Version Notes to see more details.
All developers are strongly advised to update existing Struts 2 applications to Struts 2.3.4.
Struts 2.3.4 is available in a full distribution, or as separate library, source, example and documentation distributions, from the releases page. The release is also available through the central Maven repository under Group ID "org.apache.struts". The version notes are available online.
The 2.3.x series of the Apache Struts framework has a minimum requirement of the following specification versions: Servlet API 2.4, JSP API 2.0, and Java 5.
Should any issues arise with your use of any version of the Struts framework, please post your comments to the user list, and, if appropriate, file a tracking ticket.
16 April 2012 - Struts 2.3.3 General Availability Release
The Apache Struts group is pleased to announce that Struts 2.3.3 is available as a "General Availability" release. The GA designation is our highest quality grade.
Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed to streamline the full development cycle, from building, to deploying, to maintaining applications over time.
It's a mostly maintenance release where many bugs were solved and many improvements were added. Please check the Version Notes to see more details.
All developers are strongly advised to update existing Struts 2 applications to Struts 2.3.3.
Struts 2.3.3 is available in a full distribution, or as separate library, source, example and documentation distributions, from the releases page. The release is also available through the central Maven repository under Group ID "org.apache.struts". The version notes are available online.
The 2.3.x series of the Apache Struts framework has a minimum requirement of the following specification versions: Servlet API 2.4, JSP API 2.0, and Java 5.
Should any issues arise with your use of any version of the Struts framework, please post your comments to the user list, and, if appropriate, file a tracking ticket.
22 January 2012 - Struts 2.3.1.2 General Availability Release
The Apache Struts group is pleased to announce that Struts 2.3.1.2 is available as a "General Availability" release. The GA designation is our highest quality grade.
Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed to streamline the full development cycle, from building, to deploying, to maintaining applications over time.
An important vulnerability were solved with this release:
- ParameterInterceptor vulnerability allowed remote command execution
- Default acceptedParamNames has been updated to more restrictive values
All developers are strongly advised to update existing Struts 2 applications to Struts 2.3.1.2.
Struts 2.3.1.2 is available in a full distribution, or as separate library, source, example and documentation distributions, from the releases page. The release is also available through the central Maven repository under Group ID "org.apache.struts". The release notes and the security bulletin are available online.
The 2.3.x series of the Apache Struts framework has a minimum requirement of the following specification versions: Servlet API 2.4, JSP API 2.0, and Java 5.
Should any issues arise with your use of any version of the Struts framework, please post your comments to the user list, and, if appropriate, file a tracking ticket.
Skip to: Announcements - 2011
Next: Kickstart FAQ