CODEWITHSUNDEEP
struts2
0xbe5077ed
0xbe5077ed

Reputation: 4755

How do I build or request a Struts 2 build into Maven?

I work on a Maven project that uses Struts 2 and recently I became aware of some security vulnerabilities in Struts2 which are apparently fixed in version 2.3.26.

Unfortunately for me, the highest Struts2 version that is built to Maven is 2.3.24.1, which matches the version downloadable on the Struts2 "Download a Release" page as of just now.

I'd be happy to build v 2.3.26 to Maven if that's something the community can do, or request it from the right person otherwise, but I haven't been able to figure out what to do so far.

I believe this is the source code and tag for Struts 2.3.26.

Upvotes: 0

Views: 122

Answers (1)

Andrea Ligios
Andrea Ligios

Reputation: 50203

Releases 2.3.26 and 2.3.27 had bugs: however,

Struts 2.3.28 is available from today.

It corrects both of the vulnerabilities you're talking about.

That said, if you need to build Struts2 from source code, or nightly build, or whatever, you need to follow the guides linked in this page.

Upvotes: 1

Related Questions