mellowagain / gitarena

Software development platform with built-in vcs, issue tracking and code review
MIT License
82 stars 10 forks source link

RUSTSEC-2021-0060: `aes-soft` has been merged into the `aes` crate #43

Closed github-actions[bot] closed 2 years ago

github-actions[bot] commented 2 years ago

aes-soft has been merged into the aes crate

Details
Status unmaintained
Package aes-soft
Version 0.6.4
URL https://github.com/RustCrypto/block-ciphers/pull/200
Date 2021-04-29

Please use the aes crate going forward. The new repository location is at:

<https://github.com/RustCrypto/block-ciphers/tree/master/aes&gt;

AES-NI is now autodetected at runtime on i686/x86-64 platforms. If AES-NI is not present, the aes crate will fallback to a constant-time portable software implementation.

To force the use of a constant-time portable implementation on these platforms, even if AES-NI is available, use the new force-soft feature of the aes crate to disable autodetection.

See advisory page for additional details.

mellowagain commented 2 years ago

Dependency graph for aes-soft 0.6.4:

mellowagain commented 2 years ago

Affected crate has been removed thanks to a dependency upgrade of the actix family of crates in c8c53a7.