All,
Apache has released a new version of Struts 2. LAS was not (as far as I can tell) affected by any vulnerabilities discovered between 2.5.12 and 2.5.13, but to keep in step with Struts 2 and to avoid any issues if security teams would like to have applications at the latest version, I have made a new release of LAS which upgrades to Struts 2.5.13.
ftp://ftp.pmel.noaa.gov/pub/las/las.v8.6.3.tar.gz or
https://github.com/NOAA-PMEL/LAS/releases/tag/v8.6.3
Roland
--
The policy of the DOC and NOAA requires me to inform you that the opinions in this email are mine and do not necessarily represent the opinion or policy of the Department of Commerce or the National Oceanic and Atmospheric Administration.