Resolved: Shibboleth Security Advisory 20180227
If you use the Shibboleth SP (Service Provider) software, please update it to the latest version, per the announcement linked below. If your group/unit purchased/contracted with a vendor-provided website that uses Web Single-Sign On (WebSSO), please forward this to them.
The announcement, with more information, is at
https://shibboleth.net/community/advisories/secadv_20180227.txt
More information: Resolved: Shibboleth Security Advisory 20180227
Story added 28. February 2018, content source with full text you can find at link above.