Secure testing team - Feb 2008 - Bug#464045: ftp.debian.org: Remove cruft from testing-security

Package: ftp.debian.org
Severity: normal

Hi,

obsolete packages are not removed from testing-security. At least packages
which have been removed from both testing and unstable (like e.g. php4) must
be removed from testing-security. Otherwise users will still be able to install
packages that have no security support anymore. This removal needs to be done
automatically or at least at regular intervals (like every few weeks).

It would be nice if also packages that have a newer version in testing than in
testing-security would be removed, but this is obviously less important.


Thanks in advance.

Stefan