A new Arch Linux update is available: ASA-202006-7: tomcat9: arbitrary code execution
A tomcat9 security update has been released for Arch Linux to address an arbitrary code execution.Read more @ Linux Compatible