Security support for OpenJDK 7 will end in April 2019

Security support for OpenJDK 7 will end in April 2019 when Ubuntu 14.04 reaches end-of-life status. Switch to OpenJDK 8 possible similar to the OpenJDK 6 -> OpenJDK 7 switch in Wheezy. This will cause many FTBFS for Java packages again but OpenJDK 7 is still available for building packages. Users should test whether OpenJDK 8 works for them by using the packages from jessie-backports. In April 2019 we could upload the package to Jessie directly and make the switch.

Security support for MySQL ends in 2018

Lars Tangvald asked how we would like to handle the fact that MySQL 5.5 is EOL in 2018. Thread starts at https://lists.debian.org/debian-lts/2018/01/msg00075.html. Decide whether we want to introduce a newer version of MySQL or disable the server part of MySQL as suggested by Moritz here: https://lists.debian.org/debian-lts/2018/01/msg00084.html.

Libav support

Decide how we want to maintain libav in Jessie

Tomcat support

In Jessie we will track the latest upstream releases for Tomcat 7 instead of backporting individual patches. This was discussed with the security team and they agreed with this change.