tag 864447 + pending thanks Some bugs in the tomcat8 package are closed in revision a1e2c41b37a81e5565357f8a39e1e06ee443404f in branch 'master' by Emmanuel Bourg
The full diff can be seen at https://anonscm.debian.org/cgit/pkg-java/tomcat8.git/commit/?id=a1e2c41 Commit message: Fixed CVE-2017-5664: Static error pages can be overwritten if the DefaultServlet is configured to permit writes (Closes: #864447)