php-horde-whups 3.0.9-1 is marked for autoremoval from testing on 2017-08-05 It (build-)depends on packages with these RC bugs: 865505: php-horde-image: CVE-2017-9774: RCE via crafted GET request for authenticated users