<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="dbb96b60061bb9ce1fd602ea425a74b3"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="68">
  <id>tomcat6</id>
  <title>tomcat: XSS vulnerability</title>
  <release>openSUSE 11.0</release>
  <issued date="1214958586"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=396962" id="396962" title="bug number 396962" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=403310" id="403310" title="bug number 403310" type="bugzilla"/>
  </references>
  <description>This update of tomcat fixes a cross-site-scripting
vulnerabilitiy in the host-manager. (CVE-2008-1947)
</description>
  <pkglist>
    <collection>
        <package name="tomcat6" arch="noarch" version="6.0.16" release="6.2">
          <filename>tomcat6-6.0.16-6.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-admin-webapps" arch="noarch" version="6.0.16" release="6.2">
          <filename>tomcat6-admin-webapps-6.0.16-6.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-docs-webapp" arch="noarch" version="6.0.16" release="6.2">
          <filename>tomcat6-docs-webapp-6.0.16-6.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-javadoc" arch="noarch" version="6.0.16" release="6.2">
          <filename>tomcat6-javadoc-6.0.16-6.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-jsp-2_1-api" arch="noarch" version="6.0.16" release="6.2">
          <filename>tomcat6-jsp-2_1-api-6.0.16-6.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-lib" arch="noarch" version="6.0.16" release="6.2">
          <filename>tomcat6-lib-6.0.16-6.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-servlet-2_5-api" arch="noarch" version="6.0.16" release="6.2">
          <filename>tomcat6-servlet-2_5-api-6.0.16-6.2.noarch.rpm</filename>
        </package>
        <package name="tomcat6-webapps" arch="noarch" version="6.0.16" release="6.2">
          <filename>tomcat6-webapps-6.0.16-6.2.noarch.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
