CVE-2020-27619

Advisory

Aws-encryption-sdk-cli 4.1.0 no longer supports Python 3.5. The mentioned Python version doesn't receive security updates anymore.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

===================

Deprecation
-----------
The AWS Encryption SDK CLI no longer supports Python 3.5
as of major version 4.1.x; only Python 3.6+ is supported. Customers using
Python 3.5 can still use the 3.x line of the AWS Encryption SDK CLI,
which will continue to receive security updates until 2022-07-13, in accordance
with our `Support Policy <https://github.com/aws/aws-encryption-sdk-cli/blob/master/SUPPORT_POLICY.rst>`__.

Maintenance
-----------
* Python 3.10 testing and support

Resources

• https://pypi.org/project/aws-encryption-sdk-cli
• https://pyup.io/changelogs/aws-encryption-sdk-cli/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27619