The Shibboleth Project has released V2.6.0 of the Service Provider
software, the first feature upgrade in several years.
This release includes a permanent fix for the security issue
described in the advisory last month , a number of other new
features and bug fixes, and (on Windows) includes a new version
of the Xerces XML parser that addresses a vulnerability disclosed
earlier today .
Please refer to the release notes  for a complete summary of
important changes and a link to the complete list of issues addressed.
Source code and the Windows installers are now available and RPMs will be
produced over the course of the day, including an updated Xerces package
for older platforms.