Mandriva Linux Security Advisory 2009-163 – Multiple security vulnerabilities has been identified and fixed in tomcat5. These range from denial of service to cross site scripting issues. The updated packages have been patched to prevent this. Additionally Apache Tomcat has been upgraded to the latest 5.5.27 version for MES5.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/79715/MDVSA-2009-163.txt
Source: https://packetstormsecurity.com/files/79715/Mandriva-Linux-Security-Advisory-2009-163.html