olm-sys: wrapped library unmaintained, potentially vulnerable
High severity
GitHub Reviewed
Published
Sep 3, 2024
to the GitHub Advisory Database
•
Updated Sep 3, 2024
Description
Published to the GitHub Advisory Database
Sep 3, 2024
Reviewed
Sep 3, 2024
Last updated
Sep 3, 2024
After several cryptographic vulnerabilities in
libolmwere disclosed publicly, the Matrix Foundation has officially deprecated the library.olm-sysis a thin wrapper aroundlibolmand is now deprecated and potentially vulnerable in kind.Users of
olm-sysand its higher-level abstraction,olm-rs, are highly encouraged to switch tovodozemacas soon as possible. It is the successor effort tolibolmand is written in Rust.References