tomcat55 tomcat security update tomcat security update This update of tomcat fixes several vulnerabilities: - CVE-2008-5515: RequestDispatcher usage can lead to information leakage - CVE-2009-0033: denial of service via AJP connection - CVE-2009-0580: some authentication classes allow user enumeration - CVE-2009-0781: XSS bug in example application cal2.jsp - CVE-2009-0783: replacing XML parser leads to information leakage Additionally, non-security bugs were fixed. This update of tomcat fixes several vulnerabilities: - CVE-2008-5515: RequestDispatcher usage can lead to information leakage - CVE-2009-0033: denial of service via AJP connection - CVE-2009-0580: some authentication classes allow user enumeration - CVE-2009-0781: XSS bug in example application cal2.jsp - CVE-2009-0783: replacing XML parser leads to information leakage Additionally, non-security bugs were fixed. security tomcat55 noarch a634e83ee81c4e4d83134798deb7bd7b7b64d50a tomcat55-admin-webapps noarch d612faf4b0a8565c7b65f4f87b9487a56acbdbce tomcat55-common-lib noarch ab725cf8bb9ec062a6696ab1428da8388fb5335d tomcat55-jasper noarch b4f9c5f7ec95bca213b51663c24ba4c2bcca1254 tomcat55-jasper-javadoc noarch 02b032dd22f0f2e1c6d46439db1fd5faa49e67cb tomcat55-jsp-2_0-api noarch 9fc5bf01b1cec3e393272d75827757f1cc6c9867 tomcat55-jsp-2_0-api-javadoc noarch 2b73f46e7a9e8d765eadd7820db99f2f087d900a tomcat55-server-lib noarch 026c0f7086afe3a10e04713d9644de6f6be0eae0 tomcat55-servlet-2_4-api noarch 5fb806c7f582ed1a4327ee7c4265e1264b743e1a tomcat55-servlet-2_4-api-javadoc noarch e6780596e7ce25a77955b8535f16e88aa196292d tomcat55-webapps noarch ac91c06800f95d7e3ec1593862ce81120d66316e