Shibboleth Service Provider V2.6.0 now available

[Cantor, Scott]

> I'm not finding anything on Redhat's site about their status of CVE-2016-4463.

The last two bugs took about 6 months and a month respectively. I have no idea what they will do.

> I know it was just announced, but does anyone know how they're
> categorizing this one, or if they've already addressed it for RHEL 6?

6 doesn't include this library.

-- Scott