LAS v8.6.20

Fixes an issue with the filter blocking access to the Metadata response.

LAS v8.6.19

Fixes a potential issues where files outside of the templates directory are returned.

LAS v8.6.18

Move to struts 2.5.30.

You can use the tar file, or just change out the struts-core jar file in WEB-INF/lib, recompile and redeploy.

LAS v8.6.17

Move to log4j 2.17.1.

Make your deployed WEB-INF/lib files match these (and make sure you don't leave an old files not in this distribution in your lib directory) and just about any recent version of LAS 8.6 should run.

LAS v8.6.16

Move to log4j 2.17.0.

Make your deployed WEB-INF/lib files match these (and make sure you don't leave an old files not in this distribution in your lib directory) and just about any recent version of LAS 8.6 should run.

LAS v8.6.15

Moves to log4j 2.16.0 and updates the commons logging jar to the latest (1.2).

You can remove commons-logging*jar and all the log4j jars that are in you $LAS_HOME/WebContent/WEB-INF/lib and replace them with the versions found here.

Remove the similarly named jars and replace with these:

commons-logging-1.2.jar
log4j-1.2-api-2.16.0.jar
log4j-api-2.16.0.jar
log4j-core-2.16.0.jar
log4j-slf4j-impl-2.16.0.jar

Then:

ant clean
ant deploy

from your $LAS_HOME should get you upgraded to the latest logging without doing a full re-install. This should work with most any version of LAS 8.6.

LAS v8.6.14

This release upgrades the log4j libraries used by this application to version 2.15.0.

To upgrade, you can as an alternative, simply copy the files log4j-1.2-api-2.15.0.jar, log4j-api-2.15.0.jar, and log4j-core-2.15.0.jar into your $LAS_HOME/WebContent/WEB-INF/lib directory and remove the old versions of those files.

Then recompile and redeploy with:

ant clean
ant deploy

LAS v8.6.13

This release upgrades the struts 2 core to the latest version 2.5.26.

N.B. I made a packaging error on v8.6.11 and v8.6.12 below and reverted to an old struts. You should not use those releases.

If you have an 8.6.x release running you can swap in the new library, recompile and redeploy rather than install from scratch.

LAS v8.6.12

Explicitly filter on the acceptable list of templates.

LAS v8.6.11

This release adds better filtering against XSS embedded in the URL path.