Red Hat Product Errata RHSA-2007:0871 - Security Advisory
Issued:
2007-09-26
Updated:
2007-09-26

RHSA-2007:0871 - Security Advisory

Synopsis

Moderate: tomcat security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated tomcat packages that fix several security issues are now available
for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

Tomcat is a servlet container for Java Servlet and Java Server Pages
technologies.

Tomcat was found treating single quote characters -- ' -- as delimiters in
cookies. This could allow remote attackers to obtain sensitive information,
such as session IDs, for session hijacking attacks (CVE-2007-3382).

It was reported Tomcat did not properly handle the following character
sequence in a cookie: \" (a backslash followed by a double-quote). It was
possible remote attackers could use this failure to obtain sensitive
information, such as session IDs, for session hijacking attacks
(CVE-2007-3385).

A cross-site scripting (XSS) vulnerability existed in the Host Manager
Servlet. This allowed remote attackers to inject arbitrary HTML and web
script via crafted requests (CVE-2007-3386).

Users of Tomcat should update to these erratum packages, which contain
backported patches and are not vulnerable to these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

  • BZ - 247972 - CVE-2007-3382 tomcat handling of cookies
  • BZ - 247976 - CVE-2007-3385 tomcat handling of cookie values
  • BZ - 247994 - CVE-2007-3386 tomcat host manager xss

Red Hat Enterprise Linux Server 5

SRPM
tomcat5-5.5.23-0jpp.3.0.2.el5.src.rpm SHA-256: 44c3d3aaf9f29d926204abc982fde22e632ad66d24f1de6ef4fbd8e8a8ef9674
x86_64
tomcat5-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 533252266717efe4269033c24b40ee07310da2f3170a4dcec595aff368d39253
tomcat5-admin-webapps-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 0009936ee66976e48606b55f23115e4c26d1f1bf3fc35fcf4e127827d5dd0d48
tomcat5-common-lib-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: fe9609974cc4194786c117c3c2b253c78d8cd10a95226305ff447b4bd4a20e1d
tomcat5-jasper-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 48a889252207c50d2c66a8ceb8e2b23c891b104546fc3d2b64edd51a8b6a283f
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 78c60d909b2e082049f8494d2e1addb8bd3079376a812dd22edc8cac5bac8c2a
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 729eb082b5de4f1e2081970ca5b555411878d1d6857d7db6cf675450f51dc8ae
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 88f441fcca899d3955715b3a38cf97aa3f9268c53c8eff4812c0eb2c0e4a7ae3
tomcat5-server-lib-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 2281b5e3344bdae41d0dfe6819a47dd19c96bb4f971cfaa44890158d8a552566
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 3a473405b6d5e0d0d5890293e7e2ebaaa16438fc468fa80297a94e031881f3bd
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 5d6d949924068f2e4a7238d2bad299528b8a0d229cb2e4f262ad6fd219dd9b53
tomcat5-webapps-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 2c6f029d6d80be66b292442d60af5a8e8f3d313df6d21d04ca772c32d4eed4f5
ia64
tomcat5-5.5.23-0jpp.3.0.2.el5.ia64.rpm SHA-256: 8559f8620ddbb10d2b7753d830fa65a420f4f65a44a407b7762e3f7ae5bd435c
tomcat5-admin-webapps-5.5.23-0jpp.3.0.2.el5.ia64.rpm SHA-256: fa517d2b284c8bb037f99a32deeb6d7e7e635be343dc612bf3af7adeb5681cc3
tomcat5-common-lib-5.5.23-0jpp.3.0.2.el5.ia64.rpm SHA-256: 9653a4463e374852f869494c8c7659ea1acaab2668f02f5359f1f518c67ba6f9
tomcat5-jasper-5.5.23-0jpp.3.0.2.el5.ia64.rpm SHA-256: 5a5560550ea217efda797dcf94d8ec40c81a39277f6e7e5299b0bc9ec504a3cc
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.2.el5.ia64.rpm SHA-256: 83b82c671afcfc453dbd7799007d9527e54ec5d1a291d938d68d06df5636dfc1
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.2.el5.ia64.rpm SHA-256: 7e08e45b5c9c8a0744a54ee1d2f6140d29e2dbf57c9e82f3ece81fa3974ef54e
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.2.el5.ia64.rpm SHA-256: f167115631924152ab795b7e1998fb2b9dbd82e8fcd397ee8a5a2f164f6979da
tomcat5-server-lib-5.5.23-0jpp.3.0.2.el5.ia64.rpm SHA-256: 8921fdcd350652058c37a095a8990e7f36fb5d107331da8d4e26be903026cec0
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.2.el5.ia64.rpm SHA-256: 288d6c6f6bb9c3d5ba06b95cae39b9c4be561342b477b25436eebc826230678a
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.2.el5.ia64.rpm SHA-256: 9c61f38c0ebbe1347ca00b1f4c3a06eede2979efe474e4507923050b94f2ffd1
tomcat5-webapps-5.5.23-0jpp.3.0.2.el5.ia64.rpm SHA-256: 5713abe987921c76ecc5e04885073763c43e6683ceb5ff60253a158ea36fd123
i386
tomcat5-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: dc6204eddf8c6bce6993fd7b63fc80a6b46f372cee9e0d01552373eaf8f73164
tomcat5-admin-webapps-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 35f40904a88694df67c02ea76c93cf4f6bf577b82a05148543bd103a29d87958
tomcat5-common-lib-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: b1fa975d3b88c9fbdeda20324d7078ef1b5483904e4a2355887adab1430e2d44
tomcat5-jasper-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 571e6344acbacd4674d72746b25b8e46bf5e623c61c2cdfaac01ef38e9c9645b
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 2246e2660eb40021323be20b8c8c888717722af57952baa632a1341af173e60e
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 092a684c7a340108718e7c9defe36fe9dd7a0cb7a83810c63602db1ae14662cd
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 161ae575d048506b16fc997f4f1fed21c8f4422b5ab70d3109793accc4df83b2
tomcat5-server-lib-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: c761bcfe544f9b515792392954b2478cd71bc38e13607d66bcc9417269abe681
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 6a9f7eb0d25620985ed2b3c56b0edb3ec2311a20a5b08568b827ceaf7192f50e
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 181f17e29e1e0926c66d3a7d7d0c2be18dda8b0452fb9744e4c8c1bf268bc85b
tomcat5-webapps-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: a5341d34fb9a9d0774510db11b8a3c2eff702ceaa9752c66a665c592a6014616

Red Hat Enterprise Linux Workstation 5

SRPM
tomcat5-5.5.23-0jpp.3.0.2.el5.src.rpm SHA-256: 44c3d3aaf9f29d926204abc982fde22e632ad66d24f1de6ef4fbd8e8a8ef9674
x86_64
tomcat5-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 533252266717efe4269033c24b40ee07310da2f3170a4dcec595aff368d39253
tomcat5-admin-webapps-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 0009936ee66976e48606b55f23115e4c26d1f1bf3fc35fcf4e127827d5dd0d48
tomcat5-common-lib-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: fe9609974cc4194786c117c3c2b253c78d8cd10a95226305ff447b4bd4a20e1d
tomcat5-jasper-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 48a889252207c50d2c66a8ceb8e2b23c891b104546fc3d2b64edd51a8b6a283f
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 78c60d909b2e082049f8494d2e1addb8bd3079376a812dd22edc8cac5bac8c2a
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 729eb082b5de4f1e2081970ca5b555411878d1d6857d7db6cf675450f51dc8ae
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 88f441fcca899d3955715b3a38cf97aa3f9268c53c8eff4812c0eb2c0e4a7ae3
tomcat5-server-lib-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 2281b5e3344bdae41d0dfe6819a47dd19c96bb4f971cfaa44890158d8a552566
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 3a473405b6d5e0d0d5890293e7e2ebaaa16438fc468fa80297a94e031881f3bd
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 5d6d949924068f2e4a7238d2bad299528b8a0d229cb2e4f262ad6fd219dd9b53
tomcat5-webapps-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 2c6f029d6d80be66b292442d60af5a8e8f3d313df6d21d04ca772c32d4eed4f5
i386
tomcat5-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: dc6204eddf8c6bce6993fd7b63fc80a6b46f372cee9e0d01552373eaf8f73164
tomcat5-admin-webapps-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 35f40904a88694df67c02ea76c93cf4f6bf577b82a05148543bd103a29d87958
tomcat5-common-lib-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: b1fa975d3b88c9fbdeda20324d7078ef1b5483904e4a2355887adab1430e2d44
tomcat5-jasper-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 571e6344acbacd4674d72746b25b8e46bf5e623c61c2cdfaac01ef38e9c9645b
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 2246e2660eb40021323be20b8c8c888717722af57952baa632a1341af173e60e
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 092a684c7a340108718e7c9defe36fe9dd7a0cb7a83810c63602db1ae14662cd
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 161ae575d048506b16fc997f4f1fed21c8f4422b5ab70d3109793accc4df83b2
tomcat5-server-lib-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: c761bcfe544f9b515792392954b2478cd71bc38e13607d66bcc9417269abe681
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 6a9f7eb0d25620985ed2b3c56b0edb3ec2311a20a5b08568b827ceaf7192f50e
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 181f17e29e1e0926c66d3a7d7d0c2be18dda8b0452fb9744e4c8c1bf268bc85b
tomcat5-webapps-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: a5341d34fb9a9d0774510db11b8a3c2eff702ceaa9752c66a665c592a6014616

Red Hat Enterprise Linux Desktop 5

SRPM
tomcat5-5.5.23-0jpp.3.0.2.el5.src.rpm SHA-256: 44c3d3aaf9f29d926204abc982fde22e632ad66d24f1de6ef4fbd8e8a8ef9674
x86_64
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 729eb082b5de4f1e2081970ca5b555411878d1d6857d7db6cf675450f51dc8ae
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 3a473405b6d5e0d0d5890293e7e2ebaaa16438fc468fa80297a94e031881f3bd
i386
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 092a684c7a340108718e7c9defe36fe9dd7a0cb7a83810c63602db1ae14662cd
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 6a9f7eb0d25620985ed2b3c56b0edb3ec2311a20a5b08568b827ceaf7192f50e

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
tomcat5-5.5.23-0jpp.3.0.2.el5.src.rpm SHA-256: 44c3d3aaf9f29d926204abc982fde22e632ad66d24f1de6ef4fbd8e8a8ef9674
s390x
tomcat5-5.5.23-0jpp.3.0.2.el5.s390x.rpm SHA-256: 3bdaf9aa519527c6cb6b1f660520a67b9665bf0576172bcfee0dd82d541e688e
tomcat5-admin-webapps-5.5.23-0jpp.3.0.2.el5.s390x.rpm SHA-256: 75d7910e4531d882e4b3860c7fb5645be36013fe051191ac222d46168cdd2b0c
tomcat5-common-lib-5.5.23-0jpp.3.0.2.el5.s390x.rpm SHA-256: 3d6533eb4644f25cca471ec1de4a71ced627cbeb5bff1463a0e4cbe6485bd7b0
tomcat5-jasper-5.5.23-0jpp.3.0.2.el5.s390x.rpm SHA-256: c4c8483ed40751a6a7ba19d1ad1aff330581e17e2feb3dba8fdd21e6912b53ee
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.2.el5.s390x.rpm SHA-256: bb9cee15df73186ef1de57137e071458f00a692c81d475659fded14254a08ebb
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.2.el5.s390x.rpm SHA-256: 8f295abad11b6d8319c2b94bdd925bd54ecadcd143b52e4bc2e9142dfee21a9c
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.2.el5.s390x.rpm SHA-256: 931fd1e43365c0350d0dee32fea4df0c0be0b2f63fff80820e5b0e83e03229e7
tomcat5-server-lib-5.5.23-0jpp.3.0.2.el5.s390x.rpm SHA-256: 75c2157a3a48f7e8db15e1d60cebfae25f3c758ad19e0775eb1e3635652c587f
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.2.el5.s390x.rpm SHA-256: c11c75b1c3425dbc21d717e5177a91eff650e82f85762894fbd82dbcfcc5a293
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.2.el5.s390x.rpm SHA-256: 8ee08af6ddcbdb4935c58263205b7ac52da609ccae00cb37a1bddc32f4d4594d
tomcat5-webapps-5.5.23-0jpp.3.0.2.el5.s390x.rpm SHA-256: a68089eed7191a057f7acb40ef83d004f25fee48ca6ed04056f6db7597b46e2c

Red Hat Enterprise Linux for Power, big endian 5

SRPM
tomcat5-5.5.23-0jpp.3.0.2.el5.src.rpm SHA-256: 44c3d3aaf9f29d926204abc982fde22e632ad66d24f1de6ef4fbd8e8a8ef9674
ppc
tomcat5-5.5.23-0jpp.3.0.2.el5.ppc.rpm SHA-256: 69c8a72ed700d3628b6b38f7d8aaaf6ef62d1645b32b125cdf393a0079c32334
tomcat5-admin-webapps-5.5.23-0jpp.3.0.2.el5.ppc.rpm SHA-256: d87eb2616d69f6c89045b4d4cfdf9b9c44135cd463630dca7b06ba987f2f3247
tomcat5-common-lib-5.5.23-0jpp.3.0.2.el5.ppc.rpm SHA-256: ead6a266de1c8d5ccc124201f3d9e7c06b9415a2a597ddd1f8210a7a07accddd
tomcat5-jasper-5.5.23-0jpp.3.0.2.el5.ppc.rpm SHA-256: c65f5e4b64090790628a4ade495cae3adcb8e224c66cd4fc3f58d67a95cdeedb
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.2.el5.ppc.rpm SHA-256: 8d5238eeb5228d9228f873907ca633d51bcaad599f2c7ec76f0bf9aadcc23283
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.2.el5.ppc.rpm SHA-256: 2968d841eeca1f714b85fb3910cbde16eeca4b4718e2d48d8c837a24fb5082bd
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.2.el5.ppc.rpm SHA-256: b5db5cc98a56a45589524fec481e460c23b48eb67ea6960cb80f7029ece1b484
tomcat5-server-lib-5.5.23-0jpp.3.0.2.el5.ppc.rpm SHA-256: 314ebef868301adf5028bd03c2c5d8035210d12b910345e26cd4dbd49c3dfa1b
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.2.el5.ppc.rpm SHA-256: 801e41dbaca436ed22918a060249dfe132c9d4441466489092e209e458e063d5
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.2.el5.ppc.rpm SHA-256: baaa305c7f16a6d667e37361962c609e02dbe7bcff89d6ef7c608c81a345f998
tomcat5-webapps-5.5.23-0jpp.3.0.2.el5.ppc.rpm SHA-256: 930491cef2c9d4dd532eed84bbaa71907317af87951889dcf121c793a4474f02

Red Hat Enterprise Linux Server from RHUI 5

SRPM
tomcat5-5.5.23-0jpp.3.0.2.el5.src.rpm SHA-256: 44c3d3aaf9f29d926204abc982fde22e632ad66d24f1de6ef4fbd8e8a8ef9674
x86_64
tomcat5-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 533252266717efe4269033c24b40ee07310da2f3170a4dcec595aff368d39253
tomcat5-admin-webapps-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 0009936ee66976e48606b55f23115e4c26d1f1bf3fc35fcf4e127827d5dd0d48
tomcat5-common-lib-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: fe9609974cc4194786c117c3c2b253c78d8cd10a95226305ff447b4bd4a20e1d
tomcat5-jasper-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 48a889252207c50d2c66a8ceb8e2b23c891b104546fc3d2b64edd51a8b6a283f
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 78c60d909b2e082049f8494d2e1addb8bd3079376a812dd22edc8cac5bac8c2a
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 729eb082b5de4f1e2081970ca5b555411878d1d6857d7db6cf675450f51dc8ae
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 88f441fcca899d3955715b3a38cf97aa3f9268c53c8eff4812c0eb2c0e4a7ae3
tomcat5-server-lib-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 2281b5e3344bdae41d0dfe6819a47dd19c96bb4f971cfaa44890158d8a552566
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 3a473405b6d5e0d0d5890293e7e2ebaaa16438fc468fa80297a94e031881f3bd
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 5d6d949924068f2e4a7238d2bad299528b8a0d229cb2e4f262ad6fd219dd9b53
tomcat5-webapps-5.5.23-0jpp.3.0.2.el5.x86_64.rpm SHA-256: 2c6f029d6d80be66b292442d60af5a8e8f3d313df6d21d04ca772c32d4eed4f5
i386
tomcat5-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: dc6204eddf8c6bce6993fd7b63fc80a6b46f372cee9e0d01552373eaf8f73164
tomcat5-admin-webapps-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 35f40904a88694df67c02ea76c93cf4f6bf577b82a05148543bd103a29d87958
tomcat5-common-lib-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: b1fa975d3b88c9fbdeda20324d7078ef1b5483904e4a2355887adab1430e2d44
tomcat5-jasper-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 571e6344acbacd4674d72746b25b8e46bf5e623c61c2cdfaac01ef38e9c9645b
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 2246e2660eb40021323be20b8c8c888717722af57952baa632a1341af173e60e
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 092a684c7a340108718e7c9defe36fe9dd7a0cb7a83810c63602db1ae14662cd
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 161ae575d048506b16fc997f4f1fed21c8f4422b5ab70d3109793accc4df83b2
tomcat5-server-lib-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: c761bcfe544f9b515792392954b2478cd71bc38e13607d66bcc9417269abe681
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 6a9f7eb0d25620985ed2b3c56b0edb3ec2311a20a5b08568b827ceaf7192f50e
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: 181f17e29e1e0926c66d3a7d7d0c2be18dda8b0452fb9744e4c8c1bf268bc85b
tomcat5-webapps-5.5.23-0jpp.3.0.2.el5.i386.rpm SHA-256: a5341d34fb9a9d0774510db11b8a3c2eff702ceaa9752c66a665c592a6014616

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.