A new Debian Linux update has been published: ELA-443-1 jetty security update
A jetty security update has been released for Debian GNU/Linux 8 Extended LTS to address an issue where requests to the ConcatServlet and WelcomeFilter are able to access protected resources within the WEB-INF directory.Read more @ Linux Compatible