Also where is the scm repo for this project? The cvs repo detailed at http://www.opensymphony.com/ognl/cvs.action seems to be outdated, having not been updated in years and i'm suggesting being used last around the 2.6.9 release. Other pages suggest there is a 2.7 version (see http://www.opensymphony.com/webwork/wikidocs/OGNL.html).
Sadly it is disappointing that a bug, as fundamental as this, is has been open for this long.
Please refer to a gentoo documentation on how to be a good upstream.  Without the source release ( aka not a src jar but an actual release like those by C,C++,...,...,... projects ) we will not be able to package this software. Or anything the uses it.
Gentoo Linux Developer