This updates includes a rebase from tomcat 8.0.38 up to 8.0.39 which resolves multiple CVEs:

* #1397493 – CVE-2016-6816 CVE-2016-6817 CVE-2016-8735 tomcat: various flaws