Re: EOL candidates for security-support-ended.deb10

[Moritz Mühlenhoff <jmm@inutil.org>]

Am Wed, Aug 03, 2022 at 11:54:28AM +0200 schrieb Sylvain Beucler:
> Hi,
> 
> I think the following stretch EOL entries also apply to buster, because the
> rationale still applies to the buster versions:
> - libspring-java https://lists.debian.org/debian-lts/2021/12/msg00008.html

For Spring we need a more general solution, it's not only becoming
a problem when it reaches LTS, but it already a problem in testing.

Upstream (VmWare) hardly discloses any information on security issues
other than telling the version to update to. That bundled with the fact
that even the versions in unstable (4.3) are now outside the supported
range by upstream...

Cheers,
        Moritz