A new Arch Linux update is available: ASA-202006-5: tomcat8: arbitrary code execution
A tomcat8 security update has been released for Arch Linux to address an arbitrary code execution.Read more @ Linux Compatible