A new Debian Linux update has been published: DLA 2217-1: tomcat7 security update
A tomcat7 security update has been released for Debian GNU/Linux 8 LTS to address a potential remote code execution via deserialization in tomcat7.Read more @ Linux Compatible