Shibboleth Service Provider V2.6.0 now available

[Cantor, Scott]

> Doesn't include xerces-c? It does when I yum search for it: xerces-c 3.0.1-
> 20.el6.
> 
> Is that version not vulnerable?

I misspoke. 6 included 3.0, but I didn't know that at the time and I had already shipped my build. 3.1 and 3.0 aren't ABI-compatible, so once I published it I kept doing it, and that's still the situation now. The SP won't link to the version RH supplies, so it's moot to me what they do with it.

RH7 and OpenSUSE 13 are the two supported platforms with dependencies on a broken version that I can't fix. If you care about it, you can build one yourself, install to /opt/shibboleth, and the same change that gets libcurl picked up will get it to use that version.

-- Scott