128251 2006-03-31 06:57 0000 dev-java/struts several issues (CVE-2006-154{6|7|8}) 2006-03-31 22:30:41 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html ~3 [noglsa] dizzutch P2 normal --- 1 jaervosz@gentoo.org security@gentoo.org java@gentoo.org jaervosz@gentoo.org 2006-03-31 06:57:11 0000 Bug 38374 - Validation always skipped with Globals.CANCEL_KEY. Bug 38534 - DOS attack, application hack. Bug 38749 - XSS vulnerability in LookupDispatchAction. jslootbeek@gmail.com 2006-03-31 07:09:52 0000 1.2.9 is available for download @ http://struts.apache.org/download.cgi jaervosz@gentoo.org 2006-03-31 07:33:53 0000 Java please advise and provide an updated ebuild as necessary. nichoj@gentoo.org 2006-03-31 10:33:34 0000 karltk did the 1.2.9 bump earlier today. jaervosz@gentoo.org 2006-03-31 22:30:41 0000 Struts appears to never have been stable -> closing with NO GLSA.