The Shibboleth Project has released V2.6.1 of the Service Provider software, to correct a security issue.

Release notes for this release and previous versions are here.