A patch release, V2.6.1, of the Shibboleth Service Provider software is now available. See  for release notes and a pointer to the list of issues addressed by this patch.
Source and Windows installers are now available . RPMs will be published and the macport files will be updated this evening.
The purpose of this release is primarily to address a security vulnerability and an advisory will be published tomorrow morning Eastern time. The release is being done this evening ahead of the advisory to ensure RPMs are available ahead of time because of the seriousness of the issue. Relatively few deployers are affected by the issue, though it is a critical issue for those affected, so please be on the lookout for the disclosure.