A new Arch Linux update is available: ASA-202006-6: tomcat7: arbitrary code execution
A tomcat7 security update has been released for Arch Linux to address an arbitrary code execution.Read more @ Linux Compatible