Synopsis

Important: tomcat security update

Type/Severity

Security Advisory: Important

Topic

Updated tomcat packages that fix several security issues are now available
for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

Apache Tomcat is a servlet container for the Java Servlet and JavaServer
Pages (JSP) technologies.

It was discovered that the Red Hat Security Advisory RHSA-2007:0871 did not
address all possible flaws in the way Tomcat handles certain characters and
character sequences in cookie values. A remote attacker could use this flaw
to obtain sensitive information, such as session IDs, and then use this
information for session hijacking attacks. (CVE-2007-5333)

Note: The fix for the CVE-2007-5333 flaw changes the default cookie
processing behavior: with this update, version 0 cookies that contain
values that must be quoted to be valid are automatically changed to version
1 cookies. To reactivate the previous, but insecure behavior, add the
following entry to the "/etc/tomcat5/catalina.properties" file:

org.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false

It was discovered that request dispatchers did not properly normalize user
requests that have trailing query strings, allowing remote attackers to
send specially-crafted requests that would cause an information leak.
(CVE-2008-5515)

A flaw was found in the way the Tomcat AJP (Apache JServ Protocol)
connector processes AJP connections. An attacker could use this flaw to
send specially-crafted requests that would cause a temporary denial of
service. (CVE-2009-0033)

It was discovered that the error checking methods of certain authentication
classes did not have sufficient error checking, allowing remote attackers
to enumerate (via brute force methods) usernames registered with
applications running on Tomcat when FORM-based authentication was used.
(CVE-2009-0580)

A cross-site scripting (XSS) flaw was found in the examples calendar
application. With some web browsers, remote attackers could use this flaw
to inject arbitrary web script or HTML via the "time" parameter.
(CVE-2009-0781)

It was discovered that web applications containing their own XML parsers
could replace the XML parser Tomcat uses to parse configuration files. A
malicious web application running on a Tomcat instance could read or,
potentially, modify the configuration and XML-based data of other web
applications deployed on the same Tomcat instance. (CVE-2009-0783)

Users of Tomcat should upgrade to these updated packages, which contain
backported patches to resolve these issues. Tomcat must be restarted for
this update to take effect.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Server - Extended Update Support 5.3 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 5.3 ia64
• Red Hat Enterprise Linux Server - Extended Update Support 5.3 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.3 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386
• Red Hat Enterprise Linux Server - AUS 5.3 x86_64
• Red Hat Enterprise Linux Server - AUS 5.3 ia64
• Red Hat Enterprise Linux Server - AUS 5.3 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.3 ppc

Fixes

• BZ - 427766 - CVE-2007-5333 Improve cookie parsing for tomcat5
• BZ - 489028 - CVE-2009-0781 tomcat: XSS in Apache Tomcat calendar application
• BZ - 493381 - CVE-2009-0033 tomcat6 Denial-Of-Service with AJP connection
• BZ - 503978 - CVE-2009-0580 tomcat6 Information disclosure in authentication classes
• BZ - 504153 - CVE-2009-0783 tomcat XML parser information disclosure
• BZ - 504753 - CVE-2008-5515 tomcat request dispatcher information disclosure vulnerability

CVEs

• CVE-2008-5515
• CVE-2009-0783
• CVE-2009-0580
• CVE-2009-0033
• CVE-2007-5333
• CVE-2009-0781

References

• http://tomcat.apache.org/security-5.html
• http://www.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 5

SRPM
tomcat5-5.5.23-0jpp.7.el5_3.2.src.rpm	SHA-256: 7b4f7ba9ae2faf0a83d04c5f2f274cb04bfca5cc6d884b00e80a37ccabc3179c
x86_64
tomcat5-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: f0dc2157ef1c032d99d643bb6580cfe8549314dd97e5fe83cf87f7d549d7f099
tomcat5-admin-webapps-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 5e5b892c451786608d995d0ae70daa93cc63e3d0d6e18a3171353dbf5dae3b78
tomcat5-common-lib-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: f28b0c25dd1556ca712fef2bd232718a0806a4125099bd11cc6993d1ccf2d8ff
tomcat5-jasper-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 3b39da342789216bf492c7c3fc582702cc5a4d8c39b65d3753154371b4ed2238
tomcat5-jasper-javadoc-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 446ee9e1bd42e6f02e2adfa4224c9b1ecebc7ba20ab0f6c99ac0e7db491d301a
tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 0e567fec78bb9f703fc55779a67381aa8f37ae867d11b26f1b229fd98cd686a9
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: c33e0da1d9b09b576c88c6b8dfa55ad7492685093ff940231edba9244c31f6ca
tomcat5-server-lib-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: d08e100740aec70a406c64b9532fccccbefdcebd89154377b85a10b989d8a0a5
tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 0d5901664efc2491086586b00d05084350d3b3d3351a9a0bf79a507375750b57
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 1c89cc2060af4694eb904a15cb2f4653f6c5c0932b693790f3fe68a527c22f6a
tomcat5-webapps-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 59adcadf8cdbe6536c3bdf27323608973760232e094749ec7e26c8502617e07d
ia64
tomcat5-5.5.23-0jpp.7.el5_3.2.ia64.rpm	SHA-256: b45e8c83276f33de60e8f61e853edb50dd6142c95b5eff6fbff40d6b6098b649
tomcat5-admin-webapps-5.5.23-0jpp.7.el5_3.2.ia64.rpm	SHA-256: f896ce30aaa75a42f1239651457198cb3100d171c2e8ad40050f2f08e4a34444
tomcat5-common-lib-5.5.23-0jpp.7.el5_3.2.ia64.rpm	SHA-256: 490aa0a3f7139d7b60c660ffb5a315ef2715ce56c6c0a21b72c35000d05963f5
tomcat5-jasper-5.5.23-0jpp.7.el5_3.2.ia64.rpm	SHA-256: 05fe1ee1b4e1fdc0a49af177a6995642d0e7f1ac02072eb32bf204750fe671c1
tomcat5-jasper-javadoc-5.5.23-0jpp.7.el5_3.2.ia64.rpm	SHA-256: c77d7b32e0ead31fd60b8b01362c1325b726146c480c992ec50005c34c45f49d
tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_3.2.ia64.rpm	SHA-256: d14e7f3d8515819fa1eecffcd508ca888f2b5b4fbc729843af9ce1d3909226fa
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.7.el5_3.2.ia64.rpm	SHA-256: 319054accfb00ed378340254f729d0ec1703038753f2b628836bcb6e5c7096e9
tomcat5-server-lib-5.5.23-0jpp.7.el5_3.2.ia64.rpm	SHA-256: 1650b1aff8c81f885124b4df5e788d954974e7c5cb2865614c738fc1a6f75b7e
tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_3.2.ia64.rpm	SHA-256: 0733c43f81141072ed773b1b5b220036e97ab97c06445e7bd90563a7e18351ad
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.7.el5_3.2.ia64.rpm	SHA-256: 3d7fe35e903b75ef21b4bc5b899e818aea9bfb92cf0fe3680f8b4d1c216890c7
tomcat5-webapps-5.5.23-0jpp.7.el5_3.2.ia64.rpm	SHA-256: b764971b3b66ca04862256aa4f2094ced64c78a833058be065285713d1e10175
i386
tomcat5-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: bb874fb7050727e4f7b4172cb19c6975ee05e9af665e0c0269a53504e1c4bd58
tomcat5-admin-webapps-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 3cf469a9f236ced74edda3a56a84dd773011c5ca97f67179e08dfa1519f1eace
tomcat5-common-lib-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: d707cdd57fea1306cf7133974aee6c3f8e19a25408a17fcc297dd217955f0bb5
tomcat5-jasper-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: b29cd34b5e405bd88f34fec74f5be15824abe44c4701878a2798419c8fda24fb
tomcat5-jasper-javadoc-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 6928479ed622d024352f782876240446f192a1690e3f2d8280634d26f90bff2b
tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 7be0ae165974bd8ea3c0681320ec6dfd1931b8a7bb91fa3842d84cee6ecfaf34
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 118d60450c974974046a8c49421f91925a6543ed60f7f503b7c9b2e7d13ee0d1
tomcat5-server-lib-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 4d9ed936a1ce980498214e171ccc8e3e4c597dbe34ac1b8163d0c146f4958ce8
tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: d8ad044007fe15c14e6eec6f94eaac817e2b916402e531357908a954e8eee69f
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: e041858135eed06b28bfc9b6edbc39168a942d44091f770146e6226ba984fdb1
tomcat5-webapps-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: a72da01cb1d9fa505abca216e6695a28ff652167e7ffc5c22c9a86b1ed18f54a

Red Hat Enterprise Linux Workstation 5

SRPM
tomcat5-5.5.23-0jpp.7.el5_3.2.src.rpm	SHA-256: 7b4f7ba9ae2faf0a83d04c5f2f274cb04bfca5cc6d884b00e80a37ccabc3179c
x86_64
tomcat5-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: f0dc2157ef1c032d99d643bb6580cfe8549314dd97e5fe83cf87f7d549d7f099
tomcat5-admin-webapps-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 5e5b892c451786608d995d0ae70daa93cc63e3d0d6e18a3171353dbf5dae3b78
tomcat5-common-lib-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: f28b0c25dd1556ca712fef2bd232718a0806a4125099bd11cc6993d1ccf2d8ff
tomcat5-jasper-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 3b39da342789216bf492c7c3fc582702cc5a4d8c39b65d3753154371b4ed2238
tomcat5-jasper-javadoc-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 446ee9e1bd42e6f02e2adfa4224c9b1ecebc7ba20ab0f6c99ac0e7db491d301a
tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 0e567fec78bb9f703fc55779a67381aa8f37ae867d11b26f1b229fd98cd686a9
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: c33e0da1d9b09b576c88c6b8dfa55ad7492685093ff940231edba9244c31f6ca
tomcat5-server-lib-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: d08e100740aec70a406c64b9532fccccbefdcebd89154377b85a10b989d8a0a5
tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 0d5901664efc2491086586b00d05084350d3b3d3351a9a0bf79a507375750b57
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 1c89cc2060af4694eb904a15cb2f4653f6c5c0932b693790f3fe68a527c22f6a
tomcat5-webapps-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 59adcadf8cdbe6536c3bdf27323608973760232e094749ec7e26c8502617e07d
i386
tomcat5-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: bb874fb7050727e4f7b4172cb19c6975ee05e9af665e0c0269a53504e1c4bd58
tomcat5-admin-webapps-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 3cf469a9f236ced74edda3a56a84dd773011c5ca97f67179e08dfa1519f1eace
tomcat5-common-lib-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: d707cdd57fea1306cf7133974aee6c3f8e19a25408a17fcc297dd217955f0bb5
tomcat5-jasper-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: b29cd34b5e405bd88f34fec74f5be15824abe44c4701878a2798419c8fda24fb
tomcat5-jasper-javadoc-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 6928479ed622d024352f782876240446f192a1690e3f2d8280634d26f90bff2b
tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 7be0ae165974bd8ea3c0681320ec6dfd1931b8a7bb91fa3842d84cee6ecfaf34
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 118d60450c974974046a8c49421f91925a6543ed60f7f503b7c9b2e7d13ee0d1
tomcat5-server-lib-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 4d9ed936a1ce980498214e171ccc8e3e4c597dbe34ac1b8163d0c146f4958ce8
tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: d8ad044007fe15c14e6eec6f94eaac817e2b916402e531357908a954e8eee69f
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: e041858135eed06b28bfc9b6edbc39168a942d44091f770146e6226ba984fdb1
tomcat5-webapps-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: a72da01cb1d9fa505abca216e6695a28ff652167e7ffc5c22c9a86b1ed18f54a

Red Hat Enterprise Linux Desktop 5

SRPM
tomcat5-5.5.23-0jpp.7.el5_3.2.src.rpm	SHA-256: 7b4f7ba9ae2faf0a83d04c5f2f274cb04bfca5cc6d884b00e80a37ccabc3179c
x86_64
tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 0e567fec78bb9f703fc55779a67381aa8f37ae867d11b26f1b229fd98cd686a9
tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 0d5901664efc2491086586b00d05084350d3b3d3351a9a0bf79a507375750b57
i386
tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 7be0ae165974bd8ea3c0681320ec6dfd1931b8a7bb91fa3842d84cee6ecfaf34
tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: d8ad044007fe15c14e6eec6f94eaac817e2b916402e531357908a954e8eee69f

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
tomcat5-5.5.23-0jpp.7.el5_3.2.src.rpm	SHA-256: 7b4f7ba9ae2faf0a83d04c5f2f274cb04bfca5cc6d884b00e80a37ccabc3179c
s390x
tomcat5-5.5.23-0jpp.7.el5_3.2.s390x.rpm	SHA-256: dc3dca9945e6ff41e2eef6555b138901bd08510763728d5b66b7a9419e656a04
tomcat5-admin-webapps-5.5.23-0jpp.7.el5_3.2.s390x.rpm	SHA-256: 6125a521a11280db6b00032e074421afb367ce7bae1543d48c4e4033c0daae91
tomcat5-common-lib-5.5.23-0jpp.7.el5_3.2.s390x.rpm	SHA-256: 0e7d9ae6f1d628e31d8377e080d389cff86655f04b21a05400c67309d65aabf7
tomcat5-jasper-5.5.23-0jpp.7.el5_3.2.s390x.rpm	SHA-256: f94955eb200813c2c69104b7292222c4d71988eb139fc7f8a8038c3a0080fbcf
tomcat5-jasper-javadoc-5.5.23-0jpp.7.el5_3.2.s390x.rpm	SHA-256: c2adb2ce7638a781ff1667899bc460fb73c6f252c37765dd26a20d41265eef92
tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_3.2.s390x.rpm	SHA-256: f3dd71332d20ef193c98c65a29e7315b0f433f7984941cef4c86fc7eddb47c55
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.7.el5_3.2.s390x.rpm	SHA-256: fbff9ccd157fe19889927aae5e81845278e5f608720a6ffcf1f9181539031e85
tomcat5-server-lib-5.5.23-0jpp.7.el5_3.2.s390x.rpm	SHA-256: 7bc330f0867fc44303b9619a04f8bff1d01d444c454275ebde6597e47c83bd85
tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_3.2.s390x.rpm	SHA-256: 318bef4902913a0e1ab16d9172031a619783da72b30ed11f495b962e72e1227a
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.7.el5_3.2.s390x.rpm	SHA-256: bb8f9a3fd8de540920ffacb3c88a3da3ff6eeb39da87ed7d6f0c688359aaa248
tomcat5-webapps-5.5.23-0jpp.7.el5_3.2.s390x.rpm	SHA-256: cda526d4493fbbd8a7e18204a6f37c323e1309904ee38b883ba98059729e4c19

Red Hat Enterprise Linux for Power, big endian 5

SRPM
tomcat5-5.5.23-0jpp.7.el5_3.2.src.rpm	SHA-256: 7b4f7ba9ae2faf0a83d04c5f2f274cb04bfca5cc6d884b00e80a37ccabc3179c
ppc
tomcat5-5.5.23-0jpp.7.el5_3.2.ppc.rpm	SHA-256: f47bab74e7016a3152fa28063fb26cc8bfa79e76cbe8e389089a8203aa5c881a
tomcat5-5.5.23-0jpp.7.el5_3.2.ppc64.rpm	SHA-256: 60c59e1a6fb68b4c08a78bd118a34208d6a1cc28a8d5f119247703cb1c73d39f
tomcat5-admin-webapps-5.5.23-0jpp.7.el5_3.2.ppc.rpm	SHA-256: ee998ec2d7a7148fa2a09db10d40e3e444108bbaebeca8f497de9a63d4325d7f
tomcat5-common-lib-5.5.23-0jpp.7.el5_3.2.ppc.rpm	SHA-256: 10db7ec2d7ca8c87edef85cba6dcbe10e0093e0ea90f595d4f0f311ef91774be
tomcat5-jasper-5.5.23-0jpp.7.el5_3.2.ppc.rpm	SHA-256: f094566a302571ddc637427394908416b211f5b59892a4c1b85816b04c8b1482
tomcat5-jasper-javadoc-5.5.23-0jpp.7.el5_3.2.ppc.rpm	SHA-256: 7d78d57c69bb74f4ffec147bd9e959d3a2d069f1b942a3bbed11b26702cf95c8
tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_3.2.ppc.rpm	SHA-256: b34a66199fad389c5ac134174c53dfd9a2408ea76798506b0fac83a18ac567a6
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.7.el5_3.2.ppc.rpm	SHA-256: ee21ddd11c0a6affb6393636e69b6aaa6253deafdaaeb143e34e7fcfb6640f94
tomcat5-server-lib-5.5.23-0jpp.7.el5_3.2.ppc.rpm	SHA-256: 59b519a1128579c5e1948e671ee86f283f045e0ebb00e3fde8b8942d85dcd793
tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_3.2.ppc.rpm	SHA-256: 83c1a9317543bd56c1c17b7a7f0620c6b65920bdde45b9de936b36c4f79c52fb
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.7.el5_3.2.ppc.rpm	SHA-256: 09a77d2c346a47145db43849cdabb98ecc07827ff7ad5849c11917c2bc31ec9e
tomcat5-webapps-5.5.23-0jpp.7.el5_3.2.ppc.rpm	SHA-256: f2080f189b7786e9d623afd1154dc4d0670aa641c6bd5c650d73949bf0f6d63d

Red Hat Enterprise Linux Server from RHUI 5

SRPM
tomcat5-5.5.23-0jpp.7.el5_3.2.src.rpm	SHA-256: 7b4f7ba9ae2faf0a83d04c5f2f274cb04bfca5cc6d884b00e80a37ccabc3179c
x86_64
tomcat5-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: f0dc2157ef1c032d99d643bb6580cfe8549314dd97e5fe83cf87f7d549d7f099
tomcat5-admin-webapps-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 5e5b892c451786608d995d0ae70daa93cc63e3d0d6e18a3171353dbf5dae3b78
tomcat5-common-lib-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: f28b0c25dd1556ca712fef2bd232718a0806a4125099bd11cc6993d1ccf2d8ff
tomcat5-jasper-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 3b39da342789216bf492c7c3fc582702cc5a4d8c39b65d3753154371b4ed2238
tomcat5-jasper-javadoc-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 446ee9e1bd42e6f02e2adfa4224c9b1ecebc7ba20ab0f6c99ac0e7db491d301a
tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 0e567fec78bb9f703fc55779a67381aa8f37ae867d11b26f1b229fd98cd686a9
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: c33e0da1d9b09b576c88c6b8dfa55ad7492685093ff940231edba9244c31f6ca
tomcat5-server-lib-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: d08e100740aec70a406c64b9532fccccbefdcebd89154377b85a10b989d8a0a5
tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 0d5901664efc2491086586b00d05084350d3b3d3351a9a0bf79a507375750b57
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 1c89cc2060af4694eb904a15cb2f4653f6c5c0932b693790f3fe68a527c22f6a
tomcat5-webapps-5.5.23-0jpp.7.el5_3.2.x86_64.rpm	SHA-256: 59adcadf8cdbe6536c3bdf27323608973760232e094749ec7e26c8502617e07d
i386
tomcat5-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: bb874fb7050727e4f7b4172cb19c6975ee05e9af665e0c0269a53504e1c4bd58
tomcat5-admin-webapps-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 3cf469a9f236ced74edda3a56a84dd773011c5ca97f67179e08dfa1519f1eace
tomcat5-common-lib-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: d707cdd57fea1306cf7133974aee6c3f8e19a25408a17fcc297dd217955f0bb5
tomcat5-jasper-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: b29cd34b5e405bd88f34fec74f5be15824abe44c4701878a2798419c8fda24fb
tomcat5-jasper-javadoc-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 6928479ed622d024352f782876240446f192a1690e3f2d8280634d26f90bff2b
tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 7be0ae165974bd8ea3c0681320ec6dfd1931b8a7bb91fa3842d84cee6ecfaf34
tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 118d60450c974974046a8c49421f91925a6543ed60f7f503b7c9b2e7d13ee0d1
tomcat5-server-lib-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: 4d9ed936a1ce980498214e171ccc8e3e4c597dbe34ac1b8163d0c146f4958ce8
tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: d8ad044007fe15c14e6eec6f94eaac817e2b916402e531357908a954e8eee69f
tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: e041858135eed06b28bfc9b6edbc39168a942d44091f770146e6226ba984fdb1
tomcat5-webapps-5.5.23-0jpp.7.el5_3.2.i386.rpm	SHA-256: a72da01cb1d9fa505abca216e6695a28ff652167e7ffc5c22c9a86b1ed18f54a