{"id":"GHSA-p2q9-36vw-c468","aliases":["RUSTSEC-2024-0368"],"status":"published","title":"olm-sys: wrapped library unmaintained, potentially vulnerable","description":"After several cryptographic vulnerabilities in `libolm` were disclosed publicly, the Matrix Foundation has [officially deprecated the library](https://matrix.org/blog/2024/08/libolm-deprecation/). `olm-sys` is a thin wrapper around `libolm` and is now deprecated and potentially vulnerable in kind.\n\nUsers of `olm-sys` and its higher-level abstraction, `olm-rs`, are highly encouraged to switch to [`vodozemac`](https://crates.io/crates/vodozemac) as soon as possible. It is the successor effort to `libolm` and is written in Rust.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1395"],"published":"2024-09-02T12:00:00Z","modified":"2026-02-04T04:15:11Z","affected":[{"source":"ghsa","ecosystem":"crates.io","package":"olm-sys","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.3.2"}]}]},{"source":"osv","ecosystem":"crates.io","package":"olm-sys","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"1.3.2"}]}]},{"source":"osv","ecosystem":"crates.io","package":"olm-sys","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}]}],"references":[{"url":"https://gitlab.gnome.org/BrainBlasted/olm-sys/-/issues/12","tags":["web","report"]},{"url":"https://matrix.org/blog/2024/08/libolm-deprecation","tags":["web"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2024-0368.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-p2q9-36vw-c468"},{"url":"https://gitlab.gnome.org/BrainBlasted/olm-sys","tags":["package"]},{"url":"https://crates.io/crates/olm-sys","tags":["package"]},{"url":"https://matrix.org/blog/2024/08/libolm-deprecation/","tags":["web"]}],"sources":{"ghsa":[{"id":"GHSA-p2q9-36vw-c468","title":"olm-sys: wrapped library unmaintained, potentially vulnerable","description":"After several cryptographic vulnerabilities in `libolm` were disclosed publicly, the Matrix Foundation has [officially deprecated the library](https://matrix.org/blog/2024/08/libolm-deprecation/). `olm-sys` is a thin wrapper around `libolm` and is now deprecated and potentially vulnerable in kind.\n\nUsers of `olm-sys` and its higher-level abstraction, `olm-rs`, are highly encouraged to switch to [`vodozemac`](https://crates.io/crates/vodozemac) as soon as possible. It is the successor effort to `libolm` and is written in Rust.\n","status":"published","published":"2024-09-03T21:11:21Z","modified":"2024-09-03T21:11:22Z","cwes":["CWE-1395"],"updated_at":"2026-11-02T14:38:00.257632Z"}],"osv":[{"id":"GHSA-p2q9-36vw-c468","title":"olm-sys: wrapped library unmaintained, potentially vulnerable","description":"After several cryptographic vulnerabilities in `libolm` were disclosed publicly, the Matrix Foundation has [officially deprecated the library](https://matrix.org/blog/2024/08/libolm-deprecation/). `olm-sys` is a thin wrapper around `libolm` and is now deprecated and potentially vulnerable in kind.\n\nUsers of `olm-sys` and its higher-level abstraction, `olm-rs`, are highly encouraged to switch to [`vodozemac`](https://crates.io/crates/vodozemac) as soon as possible. It is the successor effort to `libolm` and is written in Rust.\n","status":"published","published":"2024-09-03T21:11:21Z","modified":"2025-10-28T06:29:25.49973Z","cwes":["CWE-1395"],"updated_at":"2026-11-02T15:46:52.534897Z"},{"id":"RUSTSEC-2024-0368","title":"olm-sys: wrapped library unmaintained, potentially vulnerable","description":"After several cryptographic vulnerabilities in `libolm` were disclosed publicly, the Matrix Foundation has [officially deprecated the library](https://matrix.org/blog/2024/08/libolm-deprecation/). `olm-sys` is a thin wrapper around `libolm` and is now deprecated and potentially vulnerable in kind.\n\nUsers of `olm-sys` and its higher-level abstraction, `olm-rs`, are highly encouraged to switch to [`vodozemac`](https://crates.io/crates/vodozemac) as soon as possible. It is the successor effort to `libolm` and is written in Rust.","status":"published","published":"2024-09-02T12:00:00Z","modified":"2026-02-04T04:15:11.540128Z","updated_at":"2026-11-02T15:53:39.971022Z"}]}}