Nixpkgs Security Tracker

Permalink CVE-2008-3280

created 1 month ago

It was found that various OpenID Providers (OPs) had TLS …

It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator (CVE-2008-0166). In combination with the DNS Cache Poisoning issue (CVE-2008-1447) and the fact that almost all SSL/TLS implementations do not consult CRLs (currently an untracked issue), this means that it is impossible to rely on these OPs.

References

http://lists.openid.net/pipermail/openid-security/2008-August/000942.html x_refsource_MISC
https://www.exploit-db.com/exploits/5720 x_refsource_MISC
http://lists.openid.net/pipermail/openid-security/2008-August/000942.html x_transferred x_refsource_MISC
https://www.exploit-db.com/exploits/5720 x_transferred x_refsource_MISC
http://lists.openid.net/pipermail/openid-security/2008-August/000942.html x_refsource_MISC
https://www.exploit-db.com/exploits/5720 x_refsource_MISC
http://lists.openid.net/pipermail/openid-security/2008-August/000942.html x_transferred x_refsource_MISC
https://www.exploit-db.com/exploits/5720 x_transferred x_refsource_MISC

Affected products

openid

==unknown

Matching in nixpkgs

pkgs.perlPackages.NetOpenIDCommon

Libraries shared between Net::OpenID::Consumer and Net::OpenID::Server

nixos-unstable 1.20
- nixpkgs-unstable 1.20
- nixos-unstable-small 1.20
nixos-25.11 1.20
- nixos-25.11-small 1.20
- nixpkgs-25.11-darwin 1.20

pkgs.luaPackages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1
nixos-25.11 1.8.0-1
- nixos-25.11-small 1.8.0-1
- nixpkgs-25.11-darwin 1.8.0-1

pkgs.perl5Packages.NetOpenIDCommon

Libraries shared between Net::OpenID::Consumer and Net::OpenID::Server

nixos-unstable 1.20
- nixpkgs-unstable 1.20
- nixos-unstable-small 1.20

pkgs.perlPackages.NetOpenIDConsumer

Library for consumers of OpenID identities

nixos-unstable 1.18
- nixpkgs-unstable 1.18
- nixos-unstable-small 1.18
nixos-25.11 1.18
- nixos-25.11-small 1.18
- nixpkgs-25.11-darwin 1.18

pkgs.python312Packages.flask-openid

OpenID support for Flask

nixos-25.11 1.3.1
- nixos-25.11-small 1.3.1
- nixpkgs-25.11-darwin 1.3.1

pkgs.python313Packages.flask-openid

OpenID support for Flask

nixos-unstable 1.3.1
- nixpkgs-unstable 1.3.1
- nixos-unstable-small 1.3.1
nixos-25.11 1.3.1
- nixos-25.11-small 1.3.1
- nixpkgs-25.11-darwin 1.3.1

pkgs.python314Packages.flask-openid

OpenID support for Flask

nixos-unstable 1.3.1
- nixpkgs-unstable 1.3.1
- nixos-unstable-small 1.3.1

pkgs.lua51Packages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1
nixos-25.11 1.8.0-1
- nixos-25.11-small 1.8.0-1
- nixpkgs-25.11-darwin 1.8.0-1

pkgs.lua52Packages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1
nixos-25.11 1.8.0-1
- nixos-25.11-small 1.8.0-1
- nixpkgs-25.11-darwin 1.8.0-1

pkgs.lua53Packages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1
nixos-25.11 1.8.0-1
- nixos-25.11-small 1.8.0-1
- nixpkgs-25.11-darwin 1.8.0-1

pkgs.lua54Packages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1
nixos-25.11 1.8.0-1
- nixos-25.11-small 1.8.0-1
- nixpkgs-25.11-darwin 1.8.0-1

pkgs.lua55Packages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1

pkgs.perl538Packages.NetOpenIDCommon

Libraries shared between Net::OpenID::Consumer and Net::OpenID::Server

nixos-25.11 1.20
- nixos-25.11-small 1.20
- nixpkgs-25.11-darwin 1.20

pkgs.perl540Packages.NetOpenIDCommon

Libraries shared between Net::OpenID::Consumer and Net::OpenID::Server

nixos-25.11 1.20
- nixos-25.11-small 1.20
- nixpkgs-25.11-darwin 1.20

pkgs.perl5Packages.NetOpenIDConsumer

Library for consumers of OpenID identities

nixos-unstable 1.18
- nixpkgs-unstable 1.18
- nixos-unstable-small 1.18

pkgs.luajitPackages.lua-resty-openidc

A library for NGINX implementing the OpenID Connect Relying Party (RP) and the OAuth 2.0 Resource Server (RS) functionality

nixos-unstable 1.8.0-1
- nixpkgs-unstable 1.8.0-1
- nixos-unstable-small 1.8.0-1
nixos-25.11 1.8.0-1
- nixos-25.11-small 1.8.0-1
- nixpkgs-25.11-darwin 1.8.0-1

pkgs.python312Packages.openidc-client

CLI python OpenID Connect client with token caching and management

nixos-25.11 0.6.0
- nixos-25.11-small 0.6.0
- nixpkgs-25.11-darwin 0.6.0

pkgs.python312Packages.python3-openid

OpenID support for modern servers and consumers

nixos-25.11 python3-openid-3.2.0
- nixos-25.11-small python3-openid-3.2.0
- nixpkgs-25.11-darwin python3-openid-3.2.0

pkgs.python313Packages.openidc-client

CLI python OpenID Connect client with token caching and management

nixos-unstable 0.6.0
- nixpkgs-unstable 0.6.0
- nixos-unstable-small 0.6.0
nixos-25.11 0.6.0
- nixos-25.11-small 0.6.0
- nixpkgs-25.11-darwin 0.6.0

pkgs.python313Packages.python3-openid

OpenID support for modern servers and consumers

nixos-unstable python3-openid-3.2.0
- nixpkgs-unstable python3-openid-3.2.0
- nixos-unstable-small python3-openid-3.2.0
nixos-25.11 python3-openid-3.2.0
- nixos-25.11-small python3-openid-3.2.0
- nixpkgs-25.11-darwin python3-openid-3.2.0

pkgs.python314Packages.openidc-client

CLI python OpenID Connect client with token caching and management

nixos-unstable 0.6.0
- nixpkgs-unstable 0.6.0
- nixos-unstable-small 0.6.0

pkgs.python314Packages.python3-openid

OpenID support for modern servers and consumers

nixos-unstable python3-openid-3.2.0
- nixpkgs-unstable python3-openid-3.2.0
- nixos-unstable-small python3-openid-3.2.0

pkgs.perl538Packages.NetOpenIDConsumer

Library for consumers of OpenID identities

nixos-25.11 1.18
- nixos-25.11-small 1.18
- nixpkgs-25.11-darwin 1.18

pkgs.perl540Packages.NetOpenIDConsumer

Library for consumers of OpenID identities

nixos-25.11 1.18
- nixos-25.11-small 1.18
- nixpkgs-25.11-darwin 1.18

Package maintainers

@disassembler Samuel Leathers <disasm@gmail.com>

Permalink CVE-2024-31107

7.1 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality impact (C): LOW
Integrity impact (I): LOW
Availability impact (A): LOW

created 6 months ago

WordPress OpenID plugin <= 3.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DiSo Development Team OpenID allows Reflected XSS.This issue affects OpenID: from n/a through 3.6.1.