Debian Security Update DSA-4673 tomcat8 - security update

[LinuxBot]

Several vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling and code execution in the AJP connector (disabled by default in Debian).

Continue reading...