tocsin

crates.io/aws-sigv4 CVE-2023-30610: medium 5.5, EPSS 0.21%

AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending

Action: Upgrade aws-sigv4 to 0.2.1 or later.

cargo update -p aws-sigv4 --precise 0.55.1
cargo update -p aws-sigv4 --precise 0.54.2
cargo update -p aws-sigv4 --precise 0.53.2
cargo update -p aws-sigv4 --precise 0.52.1
cargo update -p aws-sigv4 --precise 0.51.1
cargo update -p aws-sigv4 --precise 0.49.1
cargo update -p aws-sigv4 --precise 0.48.1
cargo update -p aws-sigv4 --precise 0.47.1
cargo update -p aws-sigv4 --precise 0.46.1
cargo update -p aws-sigv4 --precise 0.15.1
cargo update -p aws-sigv4 --precise 0.14.1
cargo update -p aws-sigv4 --precise 0.13.1
cargo update -p aws-sigv4 --precise 0.12.1
cargo update -p aws-sigv4 --precise 0.11.1
cargo update -p aws-sigv4 --precise 0.10.2
cargo update -p aws-sigv4 --precise 0.9.1
cargo update -p aws-sigv4 --precise 0.8.1
cargo update -p aws-sigv4 --precise 0.7.1
cargo update -p aws-sigv4 --precise 0.6.1
cargo update -p aws-sigv4 --precise 0.5.3
cargo update -p aws-sigv4 --precise 0.4.2
cargo update -p aws-sigv4 --precise 0.3.1
cargo update -p aws-sigv4 --precise 0.2.1

Affected

introducedfixedlast affected
0.55.00.55.1-
0.54.10.54.2-
0.53.10.53.2-
0.52.00.52.1-
0.51.00.51.1-
0.49.00.49.1-
0.48.00.48.1-
0.47.00.47.1-
0.46.00.46.1-
0.15.00.15.1-
0.14.00.14.1-
0.13.00.13.1-
0.12.00.12.1-
0.11.00.11.1-
0.10.10.10.2-
0.9.00.9.1-
0.8.00.8.1-
0.7.00.7.1-
0.6.00.6.1-
0.5.20.5.3-
0.4.10.4.2-
0.3.00.3.1-
0.2.00.2.1-

Fixed versions

0.55.10.54.20.53.20.52.10.51.10.49.10.48.10.47.10.46.10.15.10.14.10.13.10.12.10.11.10.10.20.9.10.8.10.7.10.6.10.5.30.4.20.3.10.2.1

Sources

CVE-2023-30610 · published · modified · JSON