Stop us if you've heard this one: Remote code hijacking flaw in Apache Struts, patch ASAP

Advisory issued over yet another critical security vulnerability

The Apache Foundation is urging developers to update their Struts 2 installations and projects using the code - after a critical security flaw was found in a key component of the framework."