RHBA-2011:0138 - Bug Fix Advisory

Topic

Updated tomcat5 packages that resolve several issues are now available.

Description

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages
(JSP) technologies.

These updated tomcat5 packages provide fixes for the following bugs:

• Fetching a data source from Java Naming and Directory Interface (JNDI) failed

with a ClassNotFoundException. This happened because the naming-factory-dbcp
library referred to a missing class when calling data source. This update adds
the system property javax.sql.DataSource.Factory to JAVA_OPTS and data source
fetching works as expected. (BZ#217630)

• After upgrading to tomcat5-5.5.23-0jpp.9.el5_5, the system throws a

StackOverflowError. This happened due to a typographical error in the patch.
With this update, the error is fixed. (BZ#620996)

• After upgrading to tomcat5-5.5.23-0jpp.9.el5_5, a NullPointerException

occurred after starting the Tomcat service. This was due to an error in the
context.xml validation. This update corrects validation of the context.xml file.
(BZ#623465)

• Tomcat 5 failed to start due to incorrect file permissions. Permissions have

been corrected in the installation script and the problem no longer occurs.
(BZ#551267)

All tomcat5 users are advised to upgrade to these updated packages, which
resolve these issues.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat
Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 217630 - naming-factory-dbcp.jar missing causes JNDI errors
• BZ - 551267 - tomcat5 does not start
• BZ - 620996 - upgrade to tomcat5-5.5.23-0jpp.9.el5_5 causes StackOverflowError
• BZ - 623465 - tomcat5 upgrade to tomcat5 causes exception at start

CVEs

(none)

References

(none)