Debian Linux Security Advisory 3738-1 - Multiple security vulnerabilities were discovered in the Tomcat servlet and JSP engine, as well as in its Debian-specific maintainer scripts. Those flaws allowed for privilege escalation, information disclosure, and remote code execution.
8028bec437fa228aa9afd33369c757ee09d5b8098a5f487ad4cc3e28b24b9e87
Ubuntu Security Notice 3156-2 - USN-3156-1 fixed vulnerabilities in APT. It also caused a bug in unattended-upgrades on that may require manual intervention to repair.
3ccfa4f246d10d8becb045b90746c21c40ffba281ba92bc8d5f3f13fcc263720