SUSE CVE-2024-34063

vodozemac is an implementation of Olm and Megolm in pure Rust. Versions 0.5.0 and 0.5.1 of vodozemac have degraded secret zeroization capabilities, due to changes in third-party cryptographic dependencies the Dalek crates, which moved secret zeroization capabilities behind a feature flag and...

Degraded secret zeroization capabilities

Versions 0.5.0 and 0.5.1 of vodozemac have degraded secret zeroization capabilities, due to changes in third-party cryptographic dependencies the Dalek crates, which moved secret zeroization capabilities behind a feature flag while vodozemac disabled the default feature set. Impact The degraded...

abstract-account-factory (>=0.13.0 <=0.16.1), abstract-adapter-utils (>=0.16.0 <=0.19.2) +415 more potentially affected by CVE-2024-58263 via cosmwasm-std (=1.3.4)

cosmwasm-std CARGO version =1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on cosmwasm-std and may be impacted: - abstract-account-factory =0.13.0, =0.16.0, =0.1.0, =0.0.1, =0.1.0, =0.2.0-beta.4, =0.2.0-beta.4, =0.13.0, =0.16.5, =0.2.0-beta.4,...

AskAI (=0.1.0), ISP-SDK (>=0.1.0 <=0.2.3) +3844 more potentially affected by CVE-2024-32650 via rustls (>=0.12.0 <=0.21.0)

rustls CARGO version =0.12.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.2.0-beta.4, =0.21.0-alpha.1, =0.1.1, =0.11.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.11.3, =0.14.2 and more Source cves: CVE-2024-32650 Source advisory: OSV:RUSTSEC-2024-0336...

at51 (>=0.1.1 <=0.4.1), atrac3p-decoder (>=0.1.0 <=0.1.2) +51 more potentially affected by CVE-2023-53156 via transpose (=0.1.0)

transpose CARGO version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transpose and may be impacted: - at51 =0.1.1, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =2.6.2, =0.6.0, =0.1.0, =0.1.0, =0.1.1 and more Source...

areq (=0.1.0-alpha), bws-web-server (>=0.1.0 <=0.1.1) +26 more potentially affected by unknown CVE via h2 (=0.4.14)

h2 CARGO version =0.4.14 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - areq =0.1.0-alpha - bws-web-server =0.1.0, =0.5.2, =0.1.0, =1.0.0, =1.5.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.6.0 and more Source cves: unknown CVE Sourc...

BeerHolderBot (>=0.1.0 <=0.3.6), GetPDB (>=0.1.0 <=1.0.1) +4593 more potentially affected by unknown CVE via h2 (>=0.1.26 <=0.3.21)

h2 CARGO version =0.1.26, =0.1.0, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.2.0-alpha.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0332...

BeerHolderBot (>=0.3.5 <=0.3.8), BiliupApi (>=0.1.0 <=0.1.7) +3724 more potentially affected by unknown CVE via yaml-rust (>=0.2.2 <=0.4.5)

yaml-rust CARGO version =0.2.2, =0.3.5, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =1.0.0, =0.1.0, =0.0.9, =0.0.1, =0.0.1, =0.2.0-alpha.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0320...

masquerade-proxy (=0.1.0), monoio-quiche (=0.0.1) +3 more potentially affected by CVE-2024-1410 via quiche (>=0.10.0 <=0.18.0)

quiche CARGO version =0.10.0, =0.1.0, =0.6.9 - quiche-tokio =0.1.0 - quiver-h3 =0.1.0 Source cves: CVE-2024-1410 Source advisory: OSV:GHSA-XHG9-XWCH-VR7X...

ardaku (=0.1.0), argon (=0.1.0) +11 more potentially affected by CVE-2024-28123 via wasmi (>=0.19.0 <=0.30.0)

wasmi CARGO version =0.19.0, =0.4.0, =0.2.3, =0.2.3, =0.2.3, =0.1.0, =0.30.0 - wright =0.7.0 Source cves: CVE-2024-28123 Source advisory: OSV:GHSA-75JP-VQ8X-H4CQ...

aide (>=0.1.0 <=0.4.3), bpxe (>=0.1.0 <=0.1.2) +38 more potentially affected by unknown CVE via linkme (>=0.1.6 <=0.2.10)

linkme CARGO version =0.1.6, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2-alpha, =0.0.2-alpha, =0.0.4-alpha and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0407...

UWUWUW (>=0.13.2 <=0.13.4), ashpd (>=0.2.0 <=0.4.0-alpha.4) +65 more potentially affected by unknown CVE via gdkx11-sys (>=0.10.0 <=0.18.2)

gdkx11-sys CARGO version =0.10.0, =0.13.2, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =1.0.0, =0.3.0, =0.1.0, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0414...

BrewStillery (>=1.0.0 <=6.2.0), Druid_task1 (=0.1.0) +389 more potentially affected by unknown CVE via gtk-sys (>=0.10.0 <=0.9.2)

gtk-sys CARGO version =0.10.0, =1.0.0, =0.13.2, =1.0.0, =0.2.0, =0.1.0, =0.0.1, =0.1.2, =0.2.0, =0.21.0, =0.30.1 - avr-vm =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0420...

ashpd (>=0.2.0 <=0.4.0-alpha.4), browser_crate (=0.1.0) +42 more potentially affected by unknown CVE via gdkwayland-sys (>=0.15.3 <=0.18.2)

gdkwayland-sys CARGO version =0.15.3, =0.2.0, =0.4.0, =0.4.0, =0.1.0, =0.1.0, =0.22.0, =0.22.0, =0.22.0, =0.23.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0411...

Druid_task1 (=0.1.0), UWUWUW (>=0.13.2 <=0.13.4) +188 more potentially affected by unknown CVE via gtk3-macros (>=0.14.0 <=0.18.2)

gtk3-macros CARGO version =0.14.0, =0.13.2, =1.0.0, =0.2.0, =0.1.0, =0.2.0, =0.29.2, =0.1.0, =0.1.0, =0.2.0, =0.9.0, =0.12.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0419...

Druid_task1 (=0.1.0), UWUWUW (>=0.13.2 <=0.13.4) +274 more potentially affected by unknown CVE via atk (>=0.14.0 <=0.9.0)

atk CARGO version =0.14.0, =0.13.2, =1.0.0, =0.2.0, =0.1.0, =0.1.2, =0.2.0, =0.21.0, =0.1.0, =0.1.0, =0.2.0, =0.2.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0413...

acme-dns-rust (>=1.0.0 <=1.0.6), asfa (>=0.1.0 <=0.5.2) +72 more potentially affected by unknown CVE via whoami (>=0.5.3 <=1.2.3)

whoami CARGO version =0.5.3, =1.0.0, =0.1.0, =3.0.0, =0.60.0, =0.60.0, =0.1.0, =0.27.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.2.1, =0.0.0, =0.0.1, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0020...

a-gpt (>=0.1.0 <=0.4.0), abacuz (=0.1.1) +885 more potentially affected by unknown CVE via libgit2-sys (>=0.10.0 <=0.15.2+1.6.4)

libgit2-sys CARGO version =0.10.0, =0.1.0, =1.1.0, =0.0.1, =0.3.0, =1.2.0, =1.4.7 - amisgitpm =0.0.1 - android-cli =0.2.0 - angreal =2.0.0-rc.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-22Q8-GHMQ-63VF...

abi-stable-host-api (=0.1.1), abi_stable (>=0.2.0 <=0.11.3) +256 more potentially affected by unknown CVE via generational-arena (>=0.1.0 <=0.2.9)

generational-arena CARGO version =0.1.0, =0.2.0, =0.4.0, =0.4.0, =0.5.0, =0.1.14, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.0.7, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0014...

anchor-token (>=0.0.1 <=0.3.0-alpha.1), archid-marketplace (>=1.0.5 <=1.0.8) +150 more potentially affected by CVE-2024-58264 via serde-json-wasm (>=0.1.3 <=0.4.1)

serde-json-wasm CARGO version =0.1.3, =0.0.1, =1.0.5, =1.0.0, =1.0.0, =0.3.1, =0.1.0, =2.5.2, =0.1.0, =1.0.0, =0.4.0, =1.0.0, =2.2.0-rc3 - cosmwasm-contract-migratable-std =0.1.0 and more Source cves: CVE-2024-58264 Source advisory: OSV:GHSA-RR69-RXR6-8QWF...