A new Debian Linux update has been published: ELA-830-1 tomcat8 security update
A tomcat8 security update has been released for Debian GNU/Linux 8 and 9 Extended LTS to address a flaw where session cookies created by Apache Tomcat did not include the secure attribute.Read more @ Linux Compatible
