Matrix clients -- several vulnerabilities
Matrix developers report:
Today we are releasing security updates to libolm, matrix-js-sdk,
and several clients including Element Web / Desktop. Users are
encouraged to upgrade as soon as possible.
These releases mitigate a buffer overflow in olm_session_describe,
a libolm debugging function used by matrix-js-sdk in its end-to-end
encryption (E2EE) implementation. If you rely on matrix-js-sdk for
E2EE, you are affected.
Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright