shibboleth-sp2 2.6.0+dfsg1-5 is marked for autoremoval from testing on 2017-12-14 It (build-)depends on packages with these RC bugs: 859829: xml-security-c: Please migrate to openssl1.1 in Buster 859831: xmltooling: Please migrate to openssl1.1 in Buster