Updated tomcat5 packages that resolve several issues are now available for Red Hat Enterprise Linux 5.
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.
These updated tomcat5 packages provide fixes for the following bugs:
* When the tomcat server parsed a cookie whose name contained either single- or double-quotes and then passed that cookie name and value to a servlet, any quotes were removed from the cookie name and the cookie had an empty value. This update corrects the parsing so that single- or double-quotes can be used inside cookie names without information loss. (BZ#717456
* When any context.xml configuration file did not specify a Document Base directory (which is also called the Context Root), tomcat failed to start up due to the missing Document Base causing a NullPointerException. As a workaround, the Document Base could be defined in the context.xml file, and this would prevent the exception and allow the server to start. With this update, a missing Document Base in any context.xml file no longer causes a NullPointerException at server startup. (BZ#717457
All users of tomcat5 are advised to upgrade to these updated packages, which resolve these issues.