shibboleth-sp2 2.5.3+dfsg-2.1 is marked for autoremoval from testing on 2015-09-10 It (build-)depends on packages with these RC bugs: 793855: xmltooling: DoS, Shibboleth SP software crashes on well-formed but invalid XML (CVE-2015-0851)