Yes.
Am 24.04.14 19:37, schrieb em...@cse.concordia.ca:
> Hello List,
>
> I am using tiles-default:
> <struts>
> <package name="Example" namespace="/Action/Example"
> extends="tiles-default">
> <result-types>
> <result-type name="tiles"
> class="org.apache.struts2.views.tiles.TilesResult" />
> </result-types>
>
> <action name="*ProcessExampleAction" method="{1}"
> class="ExampleAction">
> <result name="success" type="tiles">success_gui</result>
> <result name="ajax_check">
> /WEB-INF/pages/errorinfo/ajax_error_check.jsp
> </result>
> </action>
> Do I need this update below as well? Thank you!
>
> On 04/24/2014 11:32 AM, Rene Gielen wrote:
>> In Struts 2.3.16.1, an issue with ClassLoader manipulation via request
>> parameters was supposed to be resolved. Unfortunately, the correction
>> wasn't sufficient.
>>
>> A security fix release fully addressing this issue is in preparation and
>> will be released as soon as possible.
>>
>> Once the release is available, all Struts 2 users are strongly
>> recommended to update their installations.
>>
>> * Until the release is available, all Struts 2 users are strongly
>> recommended to apply the mitigation described [1] *
>>
>> Please follow the Apache Struts announcement channels [2][3][4][5] to
>> stay updated regarding the upcoming security release. Most likely the
>> release will be available within the next 72 hours. Please prepare for
>> upgrading all Struts 2 based production systems to the new release
>> version once available.
>>
>> - The Apache Struts Team.
>>
>> [1] http://struts.apache.org/announce.html#a20140424
>> [2] http://struts.apache.org/mail.html
>> [3] http://struts.apache.org/announce.html
>> [4] https://plus.google.com/+ApacheStruts/posts
>> [5] https://twitter.com/TheApacheStruts
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
> For additional commands, e-mail: user-h...@struts.apache.org
>
--
René Gielen
IT-Neering.net
Saarstrasse 100, 52062 Aachen, Germany
Tel: +49-(0)241-4010770
Fax: +49-(0)241-4010771
Cel: +49-(0)163-2844164
http://twitter.com/rgielen
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org
