Tomcat 4.0.6 - another security release.
So the folks that develop tomcat have released another version - and it seems to be for the same reasons they released the last one. It's only been two weeks! I know the feeling when you think you've fixed a bug, you release, and you find it's still there. I just hope Tomcat doesn't start getting a bad reputation with all of these vulnerabilities.