and session hijacking bugs fixed. for more info see: http://tomcat.apache.org/security-4.html
while here, remove explicit dependency of -examples and -admin packages on java, since they depend on the main package which already has this dep. also tighten pkgspec in dependencies to v4/5.
www/jakarta-tomcat.