Multiple vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in information disclosure, HTTP request smuggling or denial of service. https://security-tracker.debian.org/tracker/DSA-6623-1