<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="5b76530260217c7ec6bbefae736cb7c8"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="161">
  <id>tomcat6</id>
  <title>tomcat: fix for directory traversal vulnerability</title>
  <release>openSUSE 11.0</release>
  <issued date="1219339220"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=417217" id="417217" title="bug number 417217" type="bugzilla"/>
  </references>
  <description>This update of tomcat fixes another directory traversal bug
which occurs when allowLinking and UTF-8 are enabled.
(CVE-2008-2938)
</description>
  <pkglist>
    <collection>
        <package name="tomcat6" arch="noarch" version="6.0.16" release="6.4">
          <filename>tomcat6-6.0.16-6.4.noarch.rpm</filename>
        </package>
        <package name="tomcat6-admin-webapps" arch="noarch" version="6.0.16" release="6.4">
          <filename>tomcat6-admin-webapps-6.0.16-6.4.noarch.rpm</filename>
        </package>
        <package name="tomcat6-docs-webapp" arch="noarch" version="6.0.16" release="6.4">
          <filename>tomcat6-docs-webapp-6.0.16-6.4.noarch.rpm</filename>
        </package>
        <package name="tomcat6-javadoc" arch="noarch" version="6.0.16" release="6.4">
          <filename>tomcat6-javadoc-6.0.16-6.4.noarch.rpm</filename>
        </package>
        <package name="tomcat6-jsp-2_1-api" arch="noarch" version="6.0.16" release="6.4">
          <filename>tomcat6-jsp-2_1-api-6.0.16-6.4.noarch.rpm</filename>
        </package>
        <package name="tomcat6-lib" arch="noarch" version="6.0.16" release="6.4">
          <filename>tomcat6-lib-6.0.16-6.4.noarch.rpm</filename>
        </package>
        <package name="tomcat6-servlet-2_5-api" arch="noarch" version="6.0.16" release="6.4">
          <filename>tomcat6-servlet-2_5-api-6.0.16-6.4.noarch.rpm</filename>
        </package>
        <package name="tomcat6-webapps" arch="noarch" version="6.0.16" release="6.4">
          <filename>tomcat6-webapps-6.0.16-6.4.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
