Re: [EXTERNAL] Re: Question Regarding Recent Security Announcement

2018-11-05 Thread Lukasz Lenart
pon., 5 lis 2018 o 13:33 David Dillard napisał(a): > > Ok, that addresses one question, but still leaves one: why is it being > recommended to update File Upload NOW due to a possible DoS, when Struts has > been using a version of File Upload with no documented DoS issue for the last > six rele

RE: [EXTERNAL] Re: Question Regarding Recent Security Announcement

2018-11-05 Thread David Dillard
stion Regarding Recent Security Announcement niedz., 4 lis 2018 o 18:40 David Dillard napisał(a): > 1. Per the Maven repository, Struts 2.3.36 recommends Fileupload 1.3.2 be > used<https://mvnrepository.com/artifact/org.apache.struts/struts2-core/2.3.36>, > not 1.3.3, so I