A new Arch Linux update is available: ASA-202006-16: tomcat8: denial of service
A tomcat8 security update has been released for Arch Linux.Read more @ Linux Compatible