On Mon, Dec 04, 2023 at 09:13:41AM +0000, Holger Levsen wrote: > Hi Salvatore, > > thanks for your continous work on Debian security! > > On Sun, Dec 03, 2023 at 08:03:05PM +0000, Debian Bug Tracking System wrote: > > > clone -1 -2 -3 > > Bug #1057315 [src:tiles] tiles: CVE-2023-49735 > > Bug 1057315 cloned as bugs 1057342-1057343 > > > retitle -2 tiles: Add README.Debian.security to document support status > > > reassign -3 src:debian-security-support > > > retitle -3 Mark tiles as only supported for building applications shipped > > > in Debian > > ack & this starts when? with 3.0.7-4 in buster? or 20231204? or?
The note to EOL libspring-java is only in Bookworm, so this is only needed for Bookworm as well. For Buster Spring is marked as EOLed, so it should probably just use the same, I'll someone from Debian LTS chime in. Cheers, Moritz