diff --git a/AwsEncryptionSDK/runtimes/rust/CHANGELOG.md b/AwsEncryptionSDK/runtimes/rust/CHANGELOG.md
index 80125c069..c5bce3486 100644
--- a/AwsEncryptionSDK/runtimes/rust/CHANGELOG.md
+++ b/AwsEncryptionSDK/runtimes/rust/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 All notable changes to this project will be documented in this file.
 
+## 1.2.3 (2026-03-10)
+
+### Maintenance
+
+- bump aws-lc-sys to 0.38 to mitigate false positive code scanners
+
 ## 0.2.0 (2024-12-18)
 
 ### Fixes
diff --git a/AwsEncryptionSDK/runtimes/rust/Cargo.toml b/AwsEncryptionSDK/runtimes/rust/Cargo.toml
index b23911676..8c749d385 100644
--- a/AwsEncryptionSDK/runtimes/rust/Cargo.toml
+++ b/AwsEncryptionSDK/runtimes/rust/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "aws-esdk"
-version = "1.2.2"
+version = "1.2.3"
 edition = "2021"
 keywords = ["cryptography", "security", "dynamodb", "encryption", "client-side"]
 license = "ISC AND (Apache-2.0 OR ISC)"
diff --git a/AwsEncryptionSDK/runtimes/rust/RELEASE.md b/AwsEncryptionSDK/runtimes/rust/RELEASE.md
index 30bd6366b..53a1cdfc5 100644
--- a/AwsEncryptionSDK/runtimes/rust/RELEASE.md
+++ b/AwsEncryptionSDK/runtimes/rust/RELEASE.md
@@ -1,7 +1,7 @@
 To publish a new version of the aws-esdk for version N.N.N
 
 1. Acquire the appropriate AWS permissions to run the tests
-1. Ensure that `dafny --version` refers to the appropropriate version for Rust
+1. Ensure that `dafny --version` refers to the appropriate version for Rust
 1. Ensure git checkout of main is fresh and clean
 1. ./start_release.sh N.N.N
 1. `cd ../../../releases/rust/esdk`
diff --git a/AwsEncryptionSDK/runtimes/rust/test_examples/Cargo.toml b/AwsEncryptionSDK/runtimes/rust/test_examples/Cargo.toml
index ce0b6820a..042be3173 100644
--- a/AwsEncryptionSDK/runtimes/rust/test_examples/Cargo.toml
+++ b/AwsEncryptionSDK/runtimes/rust/test_examples/Cargo.toml
@@ -7,8 +7,8 @@ rust-version = "1.81.0"
 
 [dependencies]
 aws-config = "1.5.15"
-aws-lc-rs = "=1.12.2"
-aws-lc-sys = "=0.25.1"
+aws-lc-rs = "1.15.4"
+aws-lc-sys = "0.38.0"
 aws-sdk-dynamodb = "1.62.0"
 aws-sdk-kms = "1.57.0"
 aws-smithy-runtime-api = {version = "1.7.3", features = ["client"] }
diff --git a/releases/rust/esdk/Cargo.toml b/releases/rust/esdk/Cargo.toml
index 93e9dcf03..1b53040b9 100644
--- a/releases/rust/esdk/Cargo.toml
+++ b/releases/rust/esdk/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "aws-esdk"
-version = "1.2.2"
+version = "1.2.3"
 edition = "2021"
 keywords = ["cryptography", "security", "dynamodb", "encryption", "client-side"]
 license = "ISC AND (Apache-2.0 OR ISC)"
@@ -17,7 +17,7 @@ readme = "README.md"
 [dependencies]
 aws-config = "1.8.12"
 aws-lc-rs = {version = "1.15.4"}
-aws-lc-sys = { version = "0.37", optional = true }
+aws-lc-sys = { version = "0.38", optional = true }
 aws-lc-fips-sys = { version = "0.13", optional = true }
 aws-sdk-dynamodb = "1.103.0"
 aws-sdk-kms = "1.98.0"
diff --git a/releases/rust/esdk/examples/cryptographic_materials_manager/restrict_algorithm_suite/signing_suite_only_cmm.rs b/releases/rust/esdk/examples/cryptographic_materials_manager/restrict_algorithm_suite/signing_suite_only_cmm.rs
index 1de3f6489..82bea04aa 100644
--- a/releases/rust/esdk/examples/cryptographic_materials_manager/restrict_algorithm_suite/signing_suite_only_cmm.rs
+++ b/releases/rust/esdk/examples/cryptographic_materials_manager/restrict_algorithm_suite/signing_suite_only_cmm.rs
@@ -1,5 +1,6 @@
 // Copyright Amazon.com Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0
+#![allow(clippy::result_large_err)]
 
 use aws_esdk::material_providers::client as mpl_client;
 use aws_esdk::material_providers::operation::decrypt_materials::DecryptMaterialsInput;