RUSTSEC-2021-0061 `aes-ctr` has been merged into the `aes` crate
The aes-ctr crate is deprecated and merged into the aes crate; developers should migrate to the aes crate for continued support and security.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is RUSTSEC-2021-0061?
RUSTSEC-2021-0061 is a vulnerability in aes-ctr, published on 29 Apr 2021.
Official description
Please use the aes crate going forward. The new repository location is at:
<https://github.com/RustCrypto/block-ciphers/tree/master/aes>
The aes crate now has an optional ctr feature which autodetects SIMD
features on i686/x86-64 targets and uses them if available, or otherwise
falls back to the implementation in the ctr crate.
If you would prefer not to have this autodetection performed, use the aes
crate directly with the ctr crate.
Which versions are affected by RUSTSEC-2021-0061?
1 open source package ship an affected version, including aes-ctr.
| Package | Affected | Fixed in |
|---|---|---|
aes-ctr crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2021-0061?
No fix has been published for RUSTSEC-2021-0061 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2021-0061 being exploited?
There is no known exploitation of RUSTSEC-2021-0061 in the wild and no public exploit code.