cargo-audit-advisory-db-20250204-1.1 on GA media (moderate)

cargo-audit-advisory-db-20250204-1.1 on GA media Announcement ID: openSUSE-SU-2025:14726-1 Rating: moderate Cross-References: CVE-2024-52813 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2024-52813

creationtimestamp| type| source ---|---|--- 2025-01-07 15:52:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113787873626385330 2025-01-07 16:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62chslxa2m 2025-01-07 17:41:35+00:00| seen|...

CVE-2024-52813 matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. Versions of the matrix-sdk-crypto Rust crate before 0.8.0 lack a dedicated mechanism to notify that a user's cryptographic identity has changed from a verified to an unverified one, which could cause client applicatio...

alerter (>=0.3.0 <=0.3.1), maruc (=0.1.0) +9 more potentially affected by CVE-2024-52813 via matrix-sdk-crypto (>=0.1.0 <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2024-52813 Source advisory: OSV:RUSTSEC-2024-0434...