A new Debian Linux update has been published: ELA-475-1 tomcat8 security update
A tomcat8 security update has been released for Debian GNU/Linux 8 Extended LTS to address an issue where an attacker can bypass some of the protection provided by the LockOut Realm.Read more @ Linux Compatible