SimpleID

Beta version 0.7 of SimpleID, a simple, personal OpenID provider written in PHP, has been released.

Upgrading to version 0.7 is strongly recommended. To download, go to the download page.

Please note that SimpleID releases are currently in beta. This means that while the software may work, it may also have gaping security holes and other nasty bugs. Use at your own risk.

• Advisory ID: SA-2009-1
• Version: All versions prior to 0.6.5
• Date: 2009-08-25
• Security risk: Critical
• Exploitable from: Remote
• Vulnerability: Cross Site Scripting

A patch has been released for SimpleID version 0.6.1. The patch fixes an issue in relation to the session_type parameter being blank under OpenID version 1.1.

The patch can be downloaded from Sourceforge. Alternatively, the 0.6.2 release will come shortly.

A patch has been released for SimpleID version 0.6. The patch fixes an issue in relation to the return_to parameter not matching when using SimpleID with certain relying parties under OpenID version 1.1.

The patch can be downloaded from Sourceforge.

Beta version 0.6 of SimpleID, a simple, personal OpenID provider written in PHP, has been released.

Upgrading to version 0.6 is strongly recommended. To download, go to SourceForge.

Older news entries can be found at the Sourceforge news site.