jabberd2 2.5.0-1 is marked for autoremoval from testing on 2017-08-01 It is affected by these RC bugs: 867032: jabberd2: CVE-2017-10807: allows anyone to authenticate using SASL ANONYMOUS, even when the option is not enabled