Comment 5 for bug 1885738

First of all, thanks for filing this bug and trying to make Ubuntu better.

As commented in #2 by Eduardo, tomcat8 is an universe package which means it is community maintained. I am subscribing ~ubuntu-server to this bug which will add it to the Ubuntu Server team backlog (community team) and anyone can grab it and work on it.

If you are not familiar with the packaging work needed but you are willing to learn I can try to guide you through this process. The documentation linked above is a good start for security updates but you can also check this page to understand how to contribute to universe packages:

https://wiki.ubuntu.com/MOTU/Contributing

Let me know if you want some guidance or have any question.