A new Debian Linux update has been published: DSA 4673-1: tomcat8 security update
A tomcat8 security update has been released for Debian GNU/Linux 9 to address several vulnerabilities that can result in HTTP request smuggling.Read more @ Linux Compatible