libpam4j 1.4-2 is marked for autoremoval from testing on 2017-11-16 It is affected by these RC bugs: 879001: libpam4j: CVE-2017-12197: libpam4j: Account check bypass 879002: libpam4j: Should the package be removed?