Security support for OpenJDK 7 will end in April 2019
Security support for OpenJDK 7 will end in April 2019 when Ubuntu 14.04 reaches end-of-life status. Switch to OpenJDK 8 possible similar to the OpenJDK 6 -> OpenJDK 7 switch in Wheezy. This will cause many FTBFS for Java packages again but OpenJDK 7 is still available for building packages. Users should test whether OpenJDK 8 works for them by using the packages from jessie-backports. In April 2019 we could upload the package to Jessie directly and make the switch.
Security support for MySQL ends in 2018
Lars Tangvald asked how we would like to handle the fact that MySQL 5.5 is EOL in 2018. Thread starts at https://lists.debian.org/debian-lts/2018/01/msg00075.html. Decide whether we want to introduce a newer version of MySQL or disable the server part of MySQL as suggested by Moritz here: https://lists.debian.org/debian-lts/2018/01/msg00084.html.
Decide how we want to maintain libav in Jessie
In Jessie we will track the latest upstream releases for Tomcat 7 instead of backporting individual patches. This was discussed with the security team and they agreed with this change.