Updated tomcat7 packages has been released for Debian 7 LTS

Package : tomcat7
Version : 7.0.28-4+deb7u10
CVE ID : not yet available
Debian Bug : 854551

It was discovered that a programming error in the processing of HTTPS
requests in the Apache Tomcat servlet and JSP engine may result in
denial of service via an infinite loop.

For Debian 7 "Wheezy", these problems have been fixed in version
7.0.28-4+deb7u10.

We recommend that you upgrade your tomcat7 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS