Users must update their vulnerable libraries manually.

Link: https://threatpost.com/apache-struts-warns-users-of-two-year-old-vulnerability/138820/