This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.
A while ago I heard about security updates being released for Tomcat: - http://www.ubuntu.com/usn/usn-3024-1 - http://www.ubuntu.com/usn/usn-3027-1 But since that time I have not seen Tomcat update in NetBeans even though I specified it to be installed when I installed NetBeans on my machine a while back (NetBeans 8.1), I thought I should file a report on the matter. Perhaps the Tomcat that I saw with these vulnerabilities being patched is somehow different from the one that you provide so I apologies if I have got this all wrong. I also hope that this is the correct place to file such a report as I have never done so in the past.