olm-sys: wrapped library unmaintained, potentially vulnerable
High severity
GitHub Reviewed
Published
Sep 3, 2024
to the GitHub Advisory Database
•
Updated Sep 3, 2024
Description
Published to the GitHub Advisory Database
Sep 3, 2024
Reviewed
Sep 3, 2024
Last updated
Sep 3, 2024
After several cryptographic vulnerabilities in
libolm
were disclosed publicly, the Matrix Foundation has officially deprecated the library.olm-sys
is a thin wrapper aroundlibolm
and is now deprecated and potentially vulnerable in kind.Users of
olm-sys
and its higher-level abstraction,olm-rs
, are highly encouraged to switch tovodozemac
as soon as possible. It is the successor effort tolibolm
and is written in Rust.References