RUSTSEC-2021-0059

    Dashboard / Vulnerabilities / RUSTSEC-2021-0059

    RUSTSEC-2021-0059

    Published: 29 Apr 2021Last Modified: 4 May 2021

    Summary: `aesni` has been merged into the `aes` crate

    Details: Please use the `aes` crate going forward. The new repository location is at: <https://github.com/RustCrypto/block-ciphers/tree/master/aes> AES-NI is now autodetected at runtime on `i686`/`x86-64` platforms. If AES-NI is not present, the `aes` crate will fallback to a constant-time portable software implementation. To prevent this fallback (and have absence of AES-NI result in an illegal instruction crash instead), continue to pass the same RUSTFLAGS which were previously required for the `aesni` crate to compile: ``` RUSTFLAGS=-Ctarget-feature=+aes,+ssse3 ```

    References: https://crates.io/crates/aesni, https://rustsec.org/advisories/RUSTSEC-2021-0059.html, https://github.com/RustCrypto/block-ciphers/pull/200

    Affected packages

    Package

    Name: aesni

    Purl: pkg:cargo/aesni

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0.0.0-0
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    RUSTSEC-2021-0059 | CVE-DB