Hi Markus, Just noticed you added and took apache-log4j1.2 in dla-needed.txt:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3ddc1c2172ff36a897b41a11bce2852c4ee69e7e However, I suspect this means that you did not see the previous change to this file: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b1ca10d0bca216b2949513be984450dc18210770 … which marks this source package as EOL in Jessie LTS, adding a commit reference to src:debian-security-support. Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org 🍥 chris-lamb.co.uk `-