Shibboleth Service Provider V2.6.0 now available

[Wessel, Keith]

I'm not finding anything on Redhat's site about their status of CVE-2016-4463. I know it was just announced, but does anyone know how they're categorizing this one, or if they've already addressed it for RHEL 6?

Thanks,
Keith


-----Original Message-----
From: Cantor, Scott [mailto:cantor.2 at osu.edu] 
Sent: Wednesday, June 29, 2016 10:49 AM
To: announce at shibboleth.net
Subject: Shibboleth Service Provider V2.6.0 now available

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The Shibboleth Project has released V2.6.0 of the Service Provider
software, the first feature upgrade in several years.

This release includes a permanent fix for the security issue
described in the advisory last month [1], a number of other new
features and bug fixes, and (on Windows) includes a new version
of the Xerces XML parser that addresses a vulnerability disclosed
earlier today [2].

Please refer to the release notes [3] for a complete summary of
important changes and a link to the complete list of issues addressed.

Source code and the Windows installers are now available and RPMs will be
produced over the course of the day, including an updated Xerces package
for older platforms.

[1] https://shibboleth.net/community/advisories/secadv_20160504.txt
[2] http://xerces.apache.org/xerces-c/secadv/CVE-2016-4463.txt
[3] https://wiki.shibboleth.net/confluence/x/QoFC

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=MDz5
-----END PGP SIGNATURE-----


--
To unsubscribe from this list send an email to announce-unsubscribe at shibboleth.net