shibboleth-sp2 2.6.1+dfsg1-1 is marked for autoremoval from testing on 2017-12-14 It (build-)depends on packages with these RC bugs: 859829: xml-security-c: Please migrate to openssl1.1 in Buster 859831: xmltooling: Please migrate to openssl1.1 in Buster