We have shipped MDAC 2.8 sp1. This is the version of MDAC that originally shipped with Windows XP sp2. It is also the version of MDAC that is included in SQL Server 2000 sp4.
This version of MDAC fixes a number of important security bugs. The download page is here. You can see the Release Manifest here . You can see a number of the bugs that were fixed in this release in the KB article here.
Many people on the MDAC team have worked hard to get this release together. In particular, Jason Waters, Debra Dove and the MDAC test team led by Uwa Agbonile.
As always we are interested in getting feedback on our releases.
Lead Program Manager, Data Access Technologies.