Hi Tomcat 8.5 breaks Dogtag PKI & tomcatjss, which means it also breaks FreeIPA, so their autopkgtests block a number of updates right now. Please remove tomcat 8.5 from proposed and block it's re-entry until Dogtag upstream has ported their code.. might not happen for 17.04. -- t