A new Debian Linux update has been published: ELA-229-1 tomcat7 security update
A tomcat7 security update has been released for Debian GNU/Linux 7 Extended LTS to address a potential remote code execution via deserialization of local files on the filesystem within tomcat7.Read more @ Linux Compatible