A new Debian Linux update has been published: DLA 2133-1: tomcat7 security update
A tomcat7 security update has been released for Debian GNU/Linux 8 to address several security vulnerabilities in the Tomcat servlet and JSP engine.Read more @ Linux Compatible