Apache Struts developers are urging users to update a file upload library due to the existence of two vulnerabilities that can be exploited for remote code execution and denial-of-service (DoS) attacks.
http://feedproxy.google.com/~r/Securityweek/~3/woPS_C781oM/apache-struts-users-told-update-vulnerable-component
