PT-2022-37428 · Aws · Aws Sdk For Rust

Published 2022-04-24 · Updated 2022-04-24

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Rusoto (affected versions not specified)

Description The maintainers of Rusoto have announced that all its crates are deprecated, including common crates such as rusoto core, rusoto signature, rusoto credential, and service crates like rusoto s3 and rusoto ec2. Users are advised to migrate to the AWS SDK for Rust, which is maintained by AWS.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue. However, users should migrate to the AWS SDK for Rust as a replacement for Rusoto.

Related Identifiers

RUSTSEC-2022-0071

Affected Products

Aws Sdk For Rust

References · 4

• https://osv.dev/vulnerability/RUSTSEC-2022-0071 · Vendor Advisory
• https://github.com/rusoto/rusoto/issues/1651 · Note
• https://rustsec.org/advisories/RUSTSEC-2022-0071.html · Note
• https://crates.io/crates/rusoto_credential · Note