Page History

...

We leave this as the last step, once the artifacts have had time to sync up on the mirrors. Target it to:
Announce the release and the vulnerability. Typically this will be sent to the reporter, the project's users list (user@struts.a.o and ), the project's dev list (dev@struts.a.o), the project's announce list (announcements@struts.a.o, samples ), security@apache.org, full-disclosure@lists.grok.org.uk and bugtraq@securityfocus.com.
Samples are available at Sample announcements page.