1.176.2. RHBA-2011:0954: tomcat5 bug fix update

Updated tomcat5 packages that resolve several issues are now available for Red Hat Enterprise Linux 5.

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

These updated tomcat5 packages provide fixes for the following bugs:

* When the tomcat server parsed a cookie whose name contained either single- or double-quotes and then passed that cookie name and value to a servlet, any quotes were removed from the cookie name and the cookie had an empty value. This update corrects the parsing so that single- or double-quotes can be used inside cookie names without information loss. (BZ#717456)

* When any context.xml configuration file did not specify a Document Base directory (which is also called the Context Root), tomcat failed to start up due to the missing Document Base causing a NullPointerException. As a workaround, the Document Base could be defined in the context.xml file, and this would prevent the exception and allow the server to start. With this update, a missing Document Base in any context.xml file no longer causes a NullPointerException at server startup. (BZ#717457)

All users of tomcat5 are advised to upgrade to these updated packages, which resolve these issues.