Bug#1032885: unblock: debian-security-support/1:12+2023.03.05

[Moritz Mühlenhoff <jmm@inutil.org>]

Am Mon, Mar 13, 2023 at 03:07:34PM +0000 schrieb Holger Levsen:
> On Mon, Mar 13, 2023 at 03:58:45PM +0100, Moritz Mühlenhoff wrote:
> > Am Mon, Mar 13, 2023 at 01:43:11PM +0100 schrieb Holger Levsen:
> > >   * security-support-limited:
> > >     - for golang and openjdk-17, point to the bookworm manual instead the one
> > >       for bullseye.
> > That's wrong, though. (And the release notes need updating to, I'll file
> > a bug soonish): In Bookworm openjdk-17 is the default Java and fully
> > supported, but we need the equivalent note for openjdk-21 now.
> 
> thanks, Moritz. I'll happily update d-s-s once the release manual is updated.
> or i could update d-s-s now too, if it's really just about replacing 17 with
> 21 in this line from  security-support-limited :
> 
> openjdk-17	See https://www.debian.org/releases/bookworm/amd64/release-notes/ch-information.en.html#openjdk-17

Ack. I also filed #1033069 to update the release notes.

> Are there any further updates expected from the security team's POV?

I pushed a change to add a note on the legacy Spring classes we only use to
build some packages, but with by itself are not supported to run anything.

With that I think everything is covered for Bookworm I think.

Cheers,
        Moritz