Secure testing team - Jan 2012 - Bug#657870: Multiple issues in Struts

Package: libstruts1.2-java
Severity: grave
Tags: security

Hi,
several vulnerabilities have been reported against Struts:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0392
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0393
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0394
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5057

The version is Debian seems ancient and unmaintained, can you
please check, whether an update is needed?

Cheers,
        Moritz