Boletines de Vulnerabilidades

Issue with tough, versions prior to 0.20.0 (Multiple CVEs)

   
Software afectado AmazonWS
 
Scope: AWS Content Type: Important (requires attention) Publication Date: 2025/03/27 02:30PM PDT Description The Update Framework (TUF) is a software framework designed to protect mechanisms that automatically identify and download updates to software. tough is a Rust client library for TUF repositories. AWS is aware of the following issues within tough, versions prior to 0.20.0. On March 27, 2025, we released a fix in tough 0.20.0 and recommend customers upgrade to address these issues and

More info:

https://aws.amazon.com/security/security-bulletins/AWS-2025-007/