Issued:
2008-03-11
Updated:
2008-03-11

RHSA-2008:0042 - Security Advisory

Synopsis

Moderate: tomcat security update

Type/Severity

Security Advisory: Moderate

Topic

Updated tomcat packages that fix security issues and bugs are now available
for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

Tomcat is a servlet container for Java Servlet and JavaServer Pages
technologies.

A directory traversal vulnerability existed in the Apache Tomcat webdav
servlet. In some configurations it allowed remote authenticated users to
read files accessible to the local tomcat process. (CVE-2007-5461)

The default security policy in the JULI logging component did not restrict
access permissions to files. This could be misused by untrusted web
applications to access and write arbitrary files in the context of the
tomcat process. (CVE-2007-5342)

Users of Tomcat should update to these errata packages, which contain
backported patches and are not vulnerable to these issues.

Solution

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux Server - Extended Update Support 5.1 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 5.1 ia64
  • Red Hat Enterprise Linux Server - Extended Update Support 5.1 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.1 s390x
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.1 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

  • BZ - 333791 - CVE-2007-5461 Absolute path traversal Apache Tomcat WEBDAV
  • BZ - 427216 - CVE-2007-5342 Apache Tomcat's default security policy is too open

CVEs

References

Red Hat Enterprise Linux Server 5

SRPM
tomcat5-5.5.23-0jpp.3.0.3.el5_1.src.rpm SHA-256: 1b5a358324a81e0e224ed999e1235f670743d855a973c43c1d56b7d67abba498
x86_64
tomcat5-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 4fce8f64d93b97dee103e45118d67af7acad4ea9442a2cc69611f4b2873ed2d1
tomcat5-admin-webapps-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 4d74861986bd4e50a27595e6d5aeb9f83bc5370726d4d4902b29461d8de7b842
tomcat5-common-lib-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 7f349251c5320f2837a3ba7857d3d66ae22f01355615cbb14856e3cb5f3b4a2b
tomcat5-jasper-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: a9d477ee9f9e1dde5a604f3a40880a980efda0ff92fcae1c62d3881f24858ad7
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: dc263ad86d095c3ba890f5bcb89e2acdd1d168ad3ac7e482a13585d3596b1ec0
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 3ddae55753912cfd2d8652af6f137db77321b223cdafaf7fc114637934c713e4
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 37bde8b9ef709bce32790f4972fd858d25064d4e26ae68c1224e29ed11605ea2
tomcat5-server-lib-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: e362a448198a83f96f18d57d5e7bfb672ce64b24bc4289c733eefbeeac85e90b
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 0bdde744965e83715baf660d9d52c1ed3fdd785f9875fdcba6954f631f0822ce
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 24f6797fc67aa726f663a58fbd8636f267c0fe465d835b022a9bec789962c628
tomcat5-webapps-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 110068bd90213df1a4c0d89f07820c4c157627790bc300f214441c5ced7b45ee
ia64
tomcat5-5.5.23-0jpp.3.0.3.el5_1.ia64.rpm SHA-256: deb25d48c7c5ffc21a12ccd466d1bbf77b48476eec03b61913b69510d08b7301
tomcat5-admin-webapps-5.5.23-0jpp.3.0.3.el5_1.ia64.rpm SHA-256: 03a1aaf538e3ce68deb52c2bc32fc25c810d3536f0f2d41fabb90a5e431e9527
tomcat5-common-lib-5.5.23-0jpp.3.0.3.el5_1.ia64.rpm SHA-256: 3ed1967efaa4edbf793e27ba413d6387c2a39d5cf0d412db751980b68b0a90e3
tomcat5-jasper-5.5.23-0jpp.3.0.3.el5_1.ia64.rpm SHA-256: 42e86bf61626f72dea225c56c49c79f46e8beed5b961e195d57f5abff9ed8327
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.3.el5_1.ia64.rpm SHA-256: f332bd2280f0c72cd0e5364fbd88dfc14248ac8feece2c860939da55f37715b7
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.3.el5_1.ia64.rpm SHA-256: 0a26751946139cbd883fd1fb72939c59f0b1bd685c7cd55e50df7a028339bc59
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.ia64.rpm SHA-256: 7d59905e7c81463488d2886ecda63aa39b13c65d0ee243ba621b07ec238b7556
tomcat5-server-lib-5.5.23-0jpp.3.0.3.el5_1.ia64.rpm SHA-256: c13a41be56575f8a7ef9b181d3452336a58a8b917867b2e93112e68ce8f06e60
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.3.el5_1.ia64.rpm SHA-256: 06beb098e198bf5ce493e95be553b267988a2dc578fc4d0774f9ea1203fdcb03
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.ia64.rpm SHA-256: 6a03bbc829b404fdd66a7d9d1252c2bb152350aea141061299a419cb5d941c80
tomcat5-webapps-5.5.23-0jpp.3.0.3.el5_1.ia64.rpm SHA-256: d821d4a7364505b4b4eda31c1dbaf7702a11bdd937e4a00348cc0d3fb6b65016
i386
tomcat5-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 1ea98d8952293da6a5a3cf459e05050de256aa97d457a75e14e9198e8cd35894
tomcat5-admin-webapps-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 0a0d4d114a3abf9498f0ce686f7723afeee214c162aef17a12b4dd62e36ffd4f
tomcat5-common-lib-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 2797cd295bc6071b01cfd7e69567a204af1d2cb32fc7e3762b455abc78400baf
tomcat5-jasper-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: feee977943ba54e9421718c8b3b12eb55c7f5b8e6f013ddc993f133751f59084
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: b6e3c8968abdfee2538be2f160c68e2e92caa7b02c7780a5e2b8767db0be9459
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: b4568a88a07687617f9ca89eca3bce35c25716aae7933f3bea34b0f3a46c96e1
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 1381e8e442b157e85d1a980f78349e3adbf207fa4f2d7fa121499bca678ca16d
tomcat5-server-lib-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 583907ee3532871aeefbfb34522d2af91c25be3c3708e7581a85d9076d649c14
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 690c348f8d666af403f31b62e285b45e68c2276d1e625f39385d5f0ff74b3a73
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 047609d5a540297ce69662b9d4b1e3144a90a9556ab625f4a7d21a4f7babb573
tomcat5-webapps-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 4a8e357a874d00fd940061092e0f487134fef947b483ffd242c837be9d6ef589

Red Hat Enterprise Linux Workstation 5

SRPM
tomcat5-5.5.23-0jpp.3.0.3.el5_1.src.rpm SHA-256: 1b5a358324a81e0e224ed999e1235f670743d855a973c43c1d56b7d67abba498
x86_64
tomcat5-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 4fce8f64d93b97dee103e45118d67af7acad4ea9442a2cc69611f4b2873ed2d1
tomcat5-admin-webapps-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 4d74861986bd4e50a27595e6d5aeb9f83bc5370726d4d4902b29461d8de7b842
tomcat5-common-lib-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 7f349251c5320f2837a3ba7857d3d66ae22f01355615cbb14856e3cb5f3b4a2b
tomcat5-jasper-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: a9d477ee9f9e1dde5a604f3a40880a980efda0ff92fcae1c62d3881f24858ad7
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: dc263ad86d095c3ba890f5bcb89e2acdd1d168ad3ac7e482a13585d3596b1ec0
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 3ddae55753912cfd2d8652af6f137db77321b223cdafaf7fc114637934c713e4
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 37bde8b9ef709bce32790f4972fd858d25064d4e26ae68c1224e29ed11605ea2
tomcat5-server-lib-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: e362a448198a83f96f18d57d5e7bfb672ce64b24bc4289c733eefbeeac85e90b
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 0bdde744965e83715baf660d9d52c1ed3fdd785f9875fdcba6954f631f0822ce
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 24f6797fc67aa726f663a58fbd8636f267c0fe465d835b022a9bec789962c628
tomcat5-webapps-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 110068bd90213df1a4c0d89f07820c4c157627790bc300f214441c5ced7b45ee
i386
tomcat5-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 1ea98d8952293da6a5a3cf459e05050de256aa97d457a75e14e9198e8cd35894
tomcat5-admin-webapps-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 0a0d4d114a3abf9498f0ce686f7723afeee214c162aef17a12b4dd62e36ffd4f
tomcat5-common-lib-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 2797cd295bc6071b01cfd7e69567a204af1d2cb32fc7e3762b455abc78400baf
tomcat5-jasper-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: feee977943ba54e9421718c8b3b12eb55c7f5b8e6f013ddc993f133751f59084
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: b6e3c8968abdfee2538be2f160c68e2e92caa7b02c7780a5e2b8767db0be9459
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: b4568a88a07687617f9ca89eca3bce35c25716aae7933f3bea34b0f3a46c96e1
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 1381e8e442b157e85d1a980f78349e3adbf207fa4f2d7fa121499bca678ca16d
tomcat5-server-lib-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 583907ee3532871aeefbfb34522d2af91c25be3c3708e7581a85d9076d649c14
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 690c348f8d666af403f31b62e285b45e68c2276d1e625f39385d5f0ff74b3a73
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 047609d5a540297ce69662b9d4b1e3144a90a9556ab625f4a7d21a4f7babb573
tomcat5-webapps-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 4a8e357a874d00fd940061092e0f487134fef947b483ffd242c837be9d6ef589

Red Hat Enterprise Linux Desktop 5

SRPM
tomcat5-5.5.23-0jpp.3.0.3.el5_1.src.rpm SHA-256: 1b5a358324a81e0e224ed999e1235f670743d855a973c43c1d56b7d67abba498
x86_64
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 3ddae55753912cfd2d8652af6f137db77321b223cdafaf7fc114637934c713e4
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 0bdde744965e83715baf660d9d52c1ed3fdd785f9875fdcba6954f631f0822ce
i386
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: b4568a88a07687617f9ca89eca3bce35c25716aae7933f3bea34b0f3a46c96e1
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 690c348f8d666af403f31b62e285b45e68c2276d1e625f39385d5f0ff74b3a73

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
tomcat5-5.5.23-0jpp.3.0.3.el5_1.src.rpm SHA-256: 1b5a358324a81e0e224ed999e1235f670743d855a973c43c1d56b7d67abba498
s390x
tomcat5-5.5.23-0jpp.3.0.3.el5_1.s390x.rpm SHA-256: b70a3b53d56a5b16ca2fb2a88eb16b4a4a706c5aee35220b7067f3e0f3c6bdd4
tomcat5-admin-webapps-5.5.23-0jpp.3.0.3.el5_1.s390x.rpm SHA-256: 8ba28fb6b2ca61322cb8fab20c313b2d022772340a7ad79036bdced32a9f72b0
tomcat5-common-lib-5.5.23-0jpp.3.0.3.el5_1.s390x.rpm SHA-256: be66bfc6495e52fc06e0be333fc8e4d4625c29d53625d546f1363d510ade9d09
tomcat5-jasper-5.5.23-0jpp.3.0.3.el5_1.s390x.rpm SHA-256: 909e6f78705b09e1b2e3bead4224d19fae8b11324db8306e5bbdbf76e5a3674d
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.3.el5_1.s390x.rpm SHA-256: 55ca6c2fca1193d872542f115fa137fe9b3ed414796bb5fdb5a3303bd8c99aa7
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.3.el5_1.s390x.rpm SHA-256: 57d18a3ad42f2a9dddda66e625b02c1a4374cec81eaac5acf4ea9a4fa1f25b1b
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.s390x.rpm SHA-256: 1d7ba70544470962b375acfe9e0f3f25854664a93b8da2ba547104be18e47406
tomcat5-server-lib-5.5.23-0jpp.3.0.3.el5_1.s390x.rpm SHA-256: cd07809b1c9eba3b37f7541bdd7a6b906f275746c461d33a9fe68bcfa6b545b6
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.3.el5_1.s390x.rpm SHA-256: 1f3f36777ec2863fe9806da4fd36f6ab4fc95549c81c176d7529aad2b936985f
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.s390x.rpm SHA-256: efe18fe3a221948c3db6a2b08c3c05335e893b962138a240f1a3c42afa609ce7
tomcat5-webapps-5.5.23-0jpp.3.0.3.el5_1.s390x.rpm SHA-256: aa41e90591e1bc2e0924976153794ca13a0d01cbcaf8f370fcfc6d860537d066

Red Hat Enterprise Linux for Power, big endian 5

SRPM
tomcat5-5.5.23-0jpp.3.0.3.el5_1.src.rpm SHA-256: 1b5a358324a81e0e224ed999e1235f670743d855a973c43c1d56b7d67abba498
ppc
tomcat5-5.5.23-0jpp.3.0.3.el5_1.ppc.rpm SHA-256: eea394560a24cca31c74dc9d38dbdced840d6f11146773879b5d7f623c4aef93
tomcat5-admin-webapps-5.5.23-0jpp.3.0.3.el5_1.ppc.rpm SHA-256: 22c161af914ffc15e465a0098434faad8e992cfab113569cc39a1a5f1680410b
tomcat5-common-lib-5.5.23-0jpp.3.0.3.el5_1.ppc.rpm SHA-256: 8e41b4cf64e1c43c939f1f3786033e22754b64b02f5ffad4cc224d0d95614946
tomcat5-jasper-5.5.23-0jpp.3.0.3.el5_1.ppc.rpm SHA-256: e2fb797e59abd6b71a619aee35de7fa9f5b14dcd375316bb46e87aab7939db50
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.3.el5_1.ppc.rpm SHA-256: f324514c8082789e51a8ba8e4192928f084fdfbb0d8eab693a6119c4a7ca9274
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.3.el5_1.ppc.rpm SHA-256: fd0179a008683b9dbee098750d96a6854f4ce94a94ee187de742509441da200f
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.ppc.rpm SHA-256: 9435109f60ed469139b948a8a218d74cc69a832f5cad772e0d5224dff5b77fa4
tomcat5-server-lib-5.5.23-0jpp.3.0.3.el5_1.ppc.rpm SHA-256: 390a223a70d6d54125e664d4cc59c22799b473fe57aad711b0e1e09de096b44f
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.3.el5_1.ppc.rpm SHA-256: 02a9bae7c2937315f1ce2f09926840d8fc874dc6b4c0ac338eac732409c5fc59
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.ppc.rpm SHA-256: a679ec995d92d386a3c80025b2128543d269e6ab5be55b74c4066db1c07df989
tomcat5-webapps-5.5.23-0jpp.3.0.3.el5_1.ppc.rpm SHA-256: 9d3d5ecef80e3f4b1cbefc817042a1ad29c79c9a5d5da142e0a5cd610f6c1ace

Red Hat Enterprise Linux Server from RHUI 5

SRPM
tomcat5-5.5.23-0jpp.3.0.3.el5_1.src.rpm SHA-256: 1b5a358324a81e0e224ed999e1235f670743d855a973c43c1d56b7d67abba498
x86_64
tomcat5-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 4fce8f64d93b97dee103e45118d67af7acad4ea9442a2cc69611f4b2873ed2d1
tomcat5-admin-webapps-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 4d74861986bd4e50a27595e6d5aeb9f83bc5370726d4d4902b29461d8de7b842
tomcat5-common-lib-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 7f349251c5320f2837a3ba7857d3d66ae22f01355615cbb14856e3cb5f3b4a2b
tomcat5-jasper-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: a9d477ee9f9e1dde5a604f3a40880a980efda0ff92fcae1c62d3881f24858ad7
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: dc263ad86d095c3ba890f5bcb89e2acdd1d168ad3ac7e482a13585d3596b1ec0
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 3ddae55753912cfd2d8652af6f137db77321b223cdafaf7fc114637934c713e4
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 37bde8b9ef709bce32790f4972fd858d25064d4e26ae68c1224e29ed11605ea2
tomcat5-server-lib-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: e362a448198a83f96f18d57d5e7bfb672ce64b24bc4289c733eefbeeac85e90b
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 0bdde744965e83715baf660d9d52c1ed3fdd785f9875fdcba6954f631f0822ce
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 24f6797fc67aa726f663a58fbd8636f267c0fe465d835b022a9bec789962c628
tomcat5-webapps-5.5.23-0jpp.3.0.3.el5_1.x86_64.rpm SHA-256: 110068bd90213df1a4c0d89f07820c4c157627790bc300f214441c5ced7b45ee
i386
tomcat5-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 1ea98d8952293da6a5a3cf459e05050de256aa97d457a75e14e9198e8cd35894
tomcat5-admin-webapps-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 0a0d4d114a3abf9498f0ce686f7723afeee214c162aef17a12b4dd62e36ffd4f
tomcat5-common-lib-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 2797cd295bc6071b01cfd7e69567a204af1d2cb32fc7e3762b455abc78400baf
tomcat5-jasper-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: feee977943ba54e9421718c8b3b12eb55c7f5b8e6f013ddc993f133751f59084
tomcat5-jasper-javadoc-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: b6e3c8968abdfee2538be2f160c68e2e92caa7b02c7780a5e2b8767db0be9459
tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: b4568a88a07687617f9ca89eca3bce35c25716aae7933f3bea34b0f3a46c96e1
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 1381e8e442b157e85d1a980f78349e3adbf207fa4f2d7fa121499bca678ca16d
tomcat5-server-lib-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 583907ee3532871aeefbfb34522d2af91c25be3c3708e7581a85d9076d649c14
tomcat5-servlet-2.4-api-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 690c348f8d666af403f31b62e285b45e68c2276d1e625f39385d5f0ff74b3a73
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 047609d5a540297ce69662b9d4b1e3144a90a9556ab625f4a7d21a4f7babb573
tomcat5-webapps-5.5.23-0jpp.3.0.3.el5_1.i386.rpm SHA-256: 4a8e357a874d00fd940061092e0f487134fef947b483ffd242c837be9d6ef589

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.