shibboleth-sp2 2.6.1+dfsg1-2 is marked for autoremoval from testing on 2018-05-03 It (build-)depends on packages with these RC bugs: 859829: xml-security-c: Please migrate to openssl1.1 in Buster 859831: xmltooling: Please migrate to openssl1.1 in Buster