The Shibboleth Project has released a security advisory that involves a potential MITM attack against LDAP data connections using "ldaps". A patch release is now available that corrects the issue and takes steps to prevent its recurrence.