sdkp2-tomcat5

Security update for Tomcat 5

Security update for Tomcat 5

This update of tomcat fixes several vulnerabilities: - CVE-2008-5515: RequestDispatcher usage can lead to information leakage - CVE-2009-0033: denial of service via AJP connection - CVE-2009-0580: some authentication classes allow user enumeration - CVE-2009-0781: XSS bug in example application cal2.jsp - CVE-2009-0783: replacing XML parser leads to information leakage Additionally, non-security bugs were fixed. This update of tomcat fixes several vulnerabilities: - CVE-2008-5515: RequestDispatcher usage can lead to information leakage - CVE-2009-0033: denial of service via AJP connection - CVE-2009-0580: some authentication classes allow user enumeration - CVE-2009-0781: XSS bug in example application cal2.jsp - CVE-2009-0783: replacing XML parser leads to information leakage Additionally, non-security bugs were fixed. security tomcat5 noarch c0ee99a661624486bfc454b20f2f04b0ed3a1633 tomcat5-admin-webapps noarch 4d1d81173fac07fb0359ba48c4a0607b1b69faa4 tomcat5-webapps noarch 13bf66c2eaf598264192f61c8fd797e2c3b22434