CVE-2024-45192

An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keys. This re...

Original description

The description as published by the source.

An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keys. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-45192 olm
Ubuntu UBUNTU-CVE-2024-45192 olm

References

advisory github.com
advisory nvd.nist.gov
package gitlab.matrix.org
patch gitlab.matrix.org
web news.ycombinator.com
web soatok.blog