rhsa-2010:0581
Vulnerability from csaf_redhat
Published
2010-08-02 20:39
Modified
2025-02-24 10:51
Summary
Red Hat Security Advisory: tomcat5 and tomcat6 security update

Notes

Topic
Updated tomcat5 and tomcat6 packages that fix one security issue are now available for JBoss Enterprise Web Server 1.0.1 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
Details
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. A flaw was found in the way Tomcat handled the Transfer-Encoding header in HTTP requests. A specially-crafted HTTP request could prevent Tomcat from sending replies, or cause Tomcat to return truncated replies, or replies containing data related to the requests of other users, for all subsequent HTTP requests. (CVE-2010-2227) Users of Tomcat should upgrade to these updated packages, which contain a backported patch to resolve this issue. Tomcat must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.



{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Updated tomcat5 and tomcat6 packages that fix one security issue are now\navailable for JBoss Enterprise Web Server 1.0.1 for Red Hat Enterprise\nLinux 4 and 5.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. A Common Vulnerability Scoring System (CVSS)\nbase score, which gives a detailed severity rating, is available from the\nCVE link in the References section.",
            title: "Topic",
         },
         {
            category: "general",
            text: "Apache Tomcat is a servlet container for the Java Servlet and JavaServer\nPages (JSP) technologies.\n\nA flaw was found in the way Tomcat handled the Transfer-Encoding header in\nHTTP requests. A specially-crafted HTTP request could prevent Tomcat from\nsending replies, or cause Tomcat to return truncated replies, or replies\ncontaining data related to the requests of other users, for all subsequent\nHTTP requests. (CVE-2010-2227)\n\nUsers of Tomcat should upgrade to these updated packages, which contain a\nbackported patch to resolve this issue. Tomcat must be restarted for this\nupdate to take effect.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2010:0581",
            url: "https://access.redhat.com/errata/RHSA-2010:0581",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#important",
            url: "https://access.redhat.com/security/updates/classification/#important",
         },
         {
            category: "external",
            summary: "http://tomcat.apache.org/security-5.html",
            url: "http://tomcat.apache.org/security-5.html",
         },
         {
            category: "external",
            summary: "http://tomcat.apache.org/security-6.html",
            url: "http://tomcat.apache.org/security-6.html",
         },
         {
            category: "external",
            summary: "612799",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=612799",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0581.json",
         },
      ],
      title: "Red Hat Security Advisory: tomcat5 and tomcat6 security update",
      tracking: {
         current_release_date: "2025-02-24T10:51:56+00:00",
         generator: {
            date: "2025-02-24T10:51:56+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.3.1",
            },
         },
         id: "RHSA-2010:0581",
         initial_release_date: "2010-08-02T20:39:00+00:00",
         revision_history: [
            {
               date: "2010-08-02T20:39:00+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2010-08-02T16:39:04+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2025-02-24T10:51:56+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
                        product: {
                           name: "Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
                           product_id: "4AS-JBEWS-5.0.0",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:jboss_enterprise_web_server:1::el4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
                        product: {
                           name: "Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
                           product_id: "4ES-JBEWS-5.0.0",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:jboss_enterprise_web_server:1::el4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
                        product: {
                           name: "Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
                           product_id: "5Server-JBEWS-5.0.0",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:jboss_enterprise_web_server:1::el5",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat JBoss Web Server",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-lib@6.0.24-7.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-el-1.0-api@6.0.24-7.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-admin-webapps@6.0.24-7.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-jsp-2.1-api@6.0.24-7.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-webapps@6.0.24-7.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6@6.0.24-7.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-log4j@6.0.24-7.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-javadoc@6.0.24-7.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-docs-webapp@6.0.24-7.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-servlet-2.5-api@6.0.24-7.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.28-9.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-jasper-eclipse@5.5.28-9.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.28-9.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.28-9.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.28-9.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.28-9.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.28-9.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.28-9.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.28-9.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5@5.5.28-9.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-parent@5.5.28-9.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.28-9.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                        product: {
                           name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.28-9.patch_01.jdk6.ep5.el4?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_id: "tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-lib@6.0.24-7.patch_01.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_id: "tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-el-1.0-api@6.0.24-7.patch_01.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_id: "tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-admin-webapps@6.0.24-7.patch_01.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_id: "tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-jsp-2.1-api@6.0.24-7.patch_01.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_id: "tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-webapps@6.0.24-7.patch_01.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_id: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6@6.0.24-7.patch_01.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_id: "tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-log4j@6.0.24-7.patch_01.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_id: "tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-javadoc@6.0.24-7.patch_01.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_id: "tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-docs-webapp@6.0.24-7.patch_01.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_id: "tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6-servlet-2.5-api@6.0.24-7.patch_01.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_id: "tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-jasper-eclipse@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-common-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat5-common-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_id: "tomcat5-common-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat5-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_id: "tomcat5-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_id: "tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-jasper-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat5-jasper-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_id: "tomcat5-jasper-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_id: "tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-server-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat5-server-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_id: "tomcat5-server-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-admin-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat5-admin-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_id: "tomcat5-admin-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_id: "tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_id: "tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-parent-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                        product: {
                           name: "tomcat5-parent-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_id: "tomcat5-parent-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5-parent@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=noarch",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src",
                        product: {
                           name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src",
                           product_id: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6@6.0.24-7.patch_01.jdk6.ep5.el4?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src",
                        product: {
                           name: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src",
                           product_id: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5@5.5.28-9.patch_01.jdk6.ep5.el4?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.src",
                        product: {
                           name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.src",
                           product_id: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat6@6.0.24-7.patch_01.jdk6.ep5.el5?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.src",
                        product: {
                           name: "tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.src",
                           product_id: "tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5@5.5.28-9.patch_01.1.jdk6.ep5.el5?arch=src",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "src",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src",
            },
            product_reference: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src",
            },
            product_reference: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 AS",
               product_id: "4AS-JBEWS-5.0.0:tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4AS-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src",
            },
            product_reference: "tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src",
            },
            product_reference: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch as a component of Red Hat JBoss Web Server 1.0 for RHEL 4 ES",
               product_id: "4ES-JBEWS-5.0.0:tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            },
            product_reference: "tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
            relates_to_product_reference: "4ES-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.src as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.src",
            },
            product_reference: "tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.src",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-admin-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat5-admin-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-common-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat5-common-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jasper-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-jasper-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat5-jasper-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-parent-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-parent-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat5-parent-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-server-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat5-server-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat5-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat5-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.src as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.src",
            },
            product_reference: "tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.src",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server",
               product_id: "5Server-JBEWS-5.0.0:tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            },
            product_reference: "tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            relates_to_product_reference: "5Server-JBEWS-5.0.0",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2010-2227",
         discovery_date: "2010-07-08T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "612799",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with \"recycling of a buffer.\"",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "4AS-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src",
               "4AS-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src",
               "4AS-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4AS-JBEWS-5.0.0:tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src",
               "4ES-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src",
               "4ES-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "4ES-JBEWS-5.0.0:tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
               "5Server-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.src",
               "5Server-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat5-jasper-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat5-parent-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat5-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.src",
               "5Server-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
               "5Server-JBEWS-5.0.0:tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2010-2227",
            },
            {
               category: "external",
               summary: "RHBZ#612799",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=612799",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2010-2227",
               url: "https://www.cve.org/CVERecord?id=CVE-2010-2227",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2010-2227",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2010-2227",
            },
         ],
         release_date: "2010-07-08T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2010-08-02T20:39:00+00:00",
               details: "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
               product_ids: [
                  "4AS-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src",
                  "4AS-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src",
                  "4AS-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src",
                  "4ES-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src",
                  "4ES-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.src",
                  "5Server-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-jasper-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-parent-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.src",
                  "5Server-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2010:0581",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "LOW",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 6.4,
                  confidentialityImpact: "PARTIAL",
                  integrityImpact: "NONE",
                  vectorString: "AV:N/AC:L/Au:N/C:P/I:N/A:P",
                  version: "2.0",
               },
               products: [
                  "4AS-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src",
                  "4AS-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src",
                  "4AS-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4AS-JBEWS-5.0.0:tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.jdk6.ep5.el4.src",
                  "4ES-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-jasper-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-parent-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat5-webapps-0:5.5.28-9.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el4.src",
                  "4ES-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "4ES-JBEWS-5.0.0:tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el4.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.src",
                  "5Server-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-jasper-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-parent-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat5-webapps-0:5.5.28-9.patch_01.1.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-0:6.0.24-7.patch_01.jdk6.ep5.el5.src",
                  "5Server-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-lib-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-log4j-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
                  "5Server-JBEWS-5.0.0:tomcat6-webapps-0:6.0.24-7.patch_01.jdk6.ep5.el5.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header",
      },
   ],
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.