You are here
Home > Preporuke > Sigurnosni propust programskog paketa struts

Sigurnosni propust programskog paketa struts

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

Fedora Update Notification
2014-08-15 01:47:51

Name : struts
Product : Fedora 20
Version : 1.3.10
Release : 10.fc20
Summary : Web application framework
Description :
Welcome to the Struts Framework! The goal of this project is to provide
an open source framework useful in building web applications with Java
Servlet and JavaServer Pages (JSP) technology. Struts encourages
application architectures based on the Model-View-Controller (MVC)
design paradigm, colloquially known as Model 2 in discussions on various
servlet and JSP related mailing lists.
Struts includes the following primary areas of functionality:
A controller servlet that dispatches requests to appropriate Action
classes provided by the application developer.
JSP custom tag libraries, and associated support in the controller
servlet, that assists developers in creating interactive form-based
Utility classes to support XML parsing, automatic population of
JavaBeans properties based on the Java reflection APIs, and
internationalization of prompts and messages.

Update Information:

fix CVE-2014-0114

* Tue Aug 12 2014 gil cattaneo <> 1.3.10-10
– fix CVE-2014-0114

[ 1 ] Bug #1091938 – CVE-2014-0114 Apache Struts 1: Class Loader manipulation via request parameters

This update can be installed with the “yum” update program. Use
su -c ‘yum update struts’ at the command line.
For more information, refer to “Managing Software with yum”,
available at

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
package-announce mailing list

AutorMarko Stanec
Cert idNCERT-REF-2014-08-0068-ADV
More in Preporuke
Sigurnosni nedostatak programskog paketa rubygem

Otkriven je sigurnosni nedostatak u programskom paketu rubygem za operacijski sustav Fedora. Otkriveni nedostatak potencijalnim napadačima omogućuje umetanje proizvoljnog SQL...