Ubuntu Update for Linux kernel vulnerabilities USN-1637-1

Please Install the Updated Packages.

It was discovered that the Apache Tomcat HTTP NIO connector incorrectly handled header data. A remote attacker could cause a denial of service by sending requests with a large amount of header data. (CVE-2012-2733) It was discovered that Apache Tomcat incorrectly handled DIGEST authentication. A remote attacker could possibly use these flaws to perform a replay attack and bypass authentication. (CVE-2012-5885, CVE-2012-5886, CVE-2012-5887)

tomcat6 on Ubuntu 12.04 LTS , Ubuntu 11.10 , Ubuntu 10.04 LTS

• https://lists.ubuntu.com/archives/ubuntu-security-announce/2012-November/001900.html

---

Updated on 2015-03-25