Details of ruby-openid security vulnerability published

"the source of the weakness can be traced back to the Final OpenID 2.0
spec"

As such, am concerned this could affect other openid 2.0
implementations.