mod_jk-ap20: ---------------------------------------------------------------------- File: mod_jk-ap20-4.1.30-0.2.i586.rpm Patchrpm: mod_jk-ap20-4.1.30-0.2.i586.patch.rpm Version: 4.1.30-0.2 Size: 56 kB Patchsize: 50 kB Date: Mon 11 Feb 2008 16:54:3 CET Source: mod_jk-4.1.30-0.2.src.rpm Security: Yes ---------------------------------------------------------------------- Description: Fixed various issues in tomcat: - CVE-2006-7196: Cross-site scripting (XSS) vulnerability in example JSP applications - CVE-2007-3382: Handling of cookies containing a ' character - CVE-2007-3385: Handling of \" in cookies - CVE-2007-5641: tomcat path traversal / information leak - CVE-2007-1860: directory traversal - CVE-2008-0128: tomcat https information disclosure - CVE-2005-2090: tomcat HTTP Request Smuggling