Updated tomcat8 packages has been released for Debian GNU/Linux 8 LTS to address two security issues in the Tomcat servlet and JSP engine
Tomcat8 Security Update for Debian 8 LTS