They probably try to fix the latest Apache Struts vulnerability exploit and screw things up with no proper backout plan. Google it if you want to find out.
www.theregister.co.uk/2017/03/09/apache_under_attack_patch_for_zero_day_available/