A new Debian Linux update has been published: ELA-827-1 tomcat7 security update
A tomcat7 security update has been released for Debian GNU/Linux 8 Extended LTS to address a flaw where session cookies created by Apache Tomcat did not include the secure attribute.Read more @ Linux Compatible
