Hi, the changes needed to secure Tomcat against the recent hash collision attack are large and instrusive. That's why we decided to update to 6.0.35 in the upcoming stable update.
No breakage is expected, but we need more "beta testers" before we can release the update. The packages can be fetched from http://people.debian.org/~tmancill/ (6.0.35-1+squeeze1) Please send negative/positive test feedback to j...@debian.org Cheers, Moritz -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/slrnjhob7g.cuu....@inutil.org