[NeoChat] [Bug 523978] New: NeoChat depends on EOL library with known vulns (libolm)

"Gavin John" <[email protected]>
Newsgroups gmane.comp.kde.devel.bugs
Message-ID <[email protected]/>
https://bugs.kde.org/show_bug.cgi?id=523978

            Bug ID: 523978
           Summary: NeoChat depends on EOL library with known vulns
                    (libolm)
    Classification: Applications
           Product: NeoChat
      Version First unspecified
       Reported In:
          Platform: Other
                OS: All
            Status: REPORTED
          Severity: major
          Priority: NOR
         Component: General
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected], [email protected]
  Target Milestone: ---

NeoChat depends on libolm, which has several known vulns which likely affect
NeoChat and [is
EOL](https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985).

https://nvd.nist.gov/vuln/detail/CVE-2024-45191
https://nvd.nist.gov/vuln/detail/CVE-2024-45192
https://nvd.nist.gov/vuln/detail/CVE-2024-45193

NeoChat should migrate away from libolm.

-- 
You are receiving this mail because:
You are watching all bug changes.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.