Hi,
the changes needed to secure Tomcat against the recent hash collision
attack are large and instrusive. That's why we decided to update to
6.0.35 in the upcoming stable update.
No breakage is expected, but we need more "beta testers" before we
can release the update. The packages can be fetched from
http://people.debian.org/~tmancill/ (6.0.35-1+squeeze1)
Please send negative/positive test feedback to jmm@debian.org
Cheers,
Moritz