tag 864447 + pending thanks Some bugs in the tomcat8 package are closed in revision b8a566435d0f49d29acfea3654cda356977372c1 in branch ' stretch' by Emmanuel Bourg
The full diff can be seen at https://anonscm.debian.org/cgit/pkg-java/tomcat8.git/commit/?id=b8a5664 Commit message: Fixed CVE-2017-5664: Static error pages can be overwritten if the DefaultServlet is configured to permit writes (Closes: #864447)
