RE: [ANN] Struts 2.3.16.3 GA release available - security fix

2014-05-15 Thread Tamer Erdogan
If we have 2.3.16.2 installed, should we also update to 2.3.16.3. Because in S2-022 2.3.16.2 is not in affected version. Regards Tamer -Original Message- From: Lukasz Lenart [mailto:lukaszlen...@apache.org] Sent: Monday, May 5, 2014 16:33 To: Struts Users Mailing List; Struts Developers

Re: [ANN] Struts 2.3.16.3 GA release available - security fix

2014-05-11 Thread Lukasz Lenart
My mistake, 2.3.16.2 is affected as well. The question is do you use CookieInterceptor and do you use "*" to catch all cookies? If both answer are yes, you should upgrade. 2014-05-08 11:31 GMT+02:00 Tamer Erdogan : > If we have 2.3.16.2 installed, should we also update to 2.3.16.3. Because in >