the following vulnerability was published for tomcat7.
Apache Tomcat Unrestricted Access to Global Resources
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
Please adjust the affected versions in the BTS as needed.
This is the maintainer address of Debian's Java team
debian-j...@lists.debian.org for discussions and questions.