crates.io/matrix-sdk-crypto CVE-2024-52813: medium 4.3, EPSS 0.49%

matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity

Action: Upgrade matrix-sdk-crypto to 0.8.0 or later.

cargo update -p matrix-sdk-crypto --precise 0.8.0

Affected

Fixed versions

Sources

• osv: GHSA-r5vf-wf4h-82gg
• https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-r5vf-wf4h-82gg
• https://nvd.nist.gov/vuln/detail/CVE-2024-52813
• https://github.com/matrix-org/matrix-rust-sdk/pull/3795
• https://github.com/matrix-org/matrix-rust-sdk
• https://rustsec.org/advisories/RUSTSEC-2024-0434.html

CVE-2024-52813 · published 2025-01-07T15:25:52Z · modified 2025-01-22T17:37:49Z · JSON