These are the notes for the Struts 2.0.11.2 distribution.

Struts 2.0.11.2 comes with a security fixed version 2.0.5 of XWork, which corrects a serious vulnerability in ParametersInterceptor allowing malicious users to remotely change server side context objects. All users are strongly encouraged to upgrade to Struts 2.0.11.2.

For prior notes in this release series, see Release Notes 2.0.11.1

Changelog

Issue Detail

• JIRA Release Notes 2.0.11.2
• JIRA Release Notes 2.0.11.1
• JIRA Release Notes 2.0.11
• JIRA Release Notes 2.0.10
• JIRA Release Notes 2.0.9
• JIRA Release Notes 2.0.8
• JIRA Release Notes 2.0.7
• JIRA Release Notes 2.0.6
• JIRA Release Notes 2.0.5
• JIRA Release Notes 2.0.4
• JIRA Release Notes 2.0.3
• JIRA Release Notes 2.0.2
• JIRA Release Notes 2.0.1
• JIRA Release Notes 2.0.0

Issue List

• Struts 2.0.11.2 DONE

Other resources

• Commit Logs (Struts 1 and Struts 2)
• Source Code Repository (includes change browsing)

Release Plan

• Struts 2.0.11.2 is a security fix for the prior Struts 2.0.11.1 GA release.
• The Release Manager is Rene Gielen.
• The tag date for the release is 23 Jun 2008.