tocsin

CVE-2023-30610

2 advisories.

crates.io/aws-sigv4 CVE-2023-30610: medium 5.5

AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending

Action: Upgrade aws-sigv4 to 0.2.1 or later.

cargo update -p aws-sigv4 --precise 0.55.1
cargo update -p aws-sigv4 --precise 0.54.2
cargo update -p aws-sigv4 --precise 0.53.2
cargo update -p aws-sigv4 --precise 0.52.1
cargo update -p aws-sigv4 --precise 0.51.1
cargo update -p aws-sigv4 --precise 0.49.1
cargo update -p aws-sigv4 --precise 0.48.1
cargo update -p aws-sigv4 --precise 0.47.1
cargo update -p aws-sigv4 --precise 0.46.1
cargo update -p aws-sigv4 --precise 0.15.1
cargo update -p aws-sigv4 --precise 0.14.1
cargo update -p aws-sigv4 --precise 0.13.1
cargo update -p aws-sigv4 --precise 0.12.1
cargo update -p aws-sigv4 --precise 0.11.1
cargo update -p aws-sigv4 --precise 0.10.2
cargo update -p aws-sigv4 --precise 0.9.1
cargo update -p aws-sigv4 --precise 0.8.1
cargo update -p aws-sigv4 --precise 0.7.1
cargo update -p aws-sigv4 --precise 0.6.1
cargo update -p aws-sigv4 --precise 0.5.3
cargo update -p aws-sigv4 --precise 0.4.2
cargo update -p aws-sigv4 --precise 0.3.1
cargo update -p aws-sigv4 --precise 0.2.1

Affected

introducedfixedlast affected
0.55.00.55.1-
0.54.10.54.2-
0.53.10.53.2-
0.52.00.52.1-
0.51.00.51.1-
0.49.00.49.1-
0.48.00.48.1-
0.47.00.47.1-
0.46.00.46.1-
0.15.00.15.1-
0.14.00.14.1-
0.13.00.13.1-
0.12.00.12.1-
0.11.00.11.1-
0.10.10.10.2-
0.9.00.9.1-
0.8.00.8.1-
0.7.00.7.1-
0.6.00.6.1-
0.5.20.5.3-
0.4.10.4.2-
0.3.00.3.1-
0.2.00.2.1-

Fixed versions

0.55.10.54.20.53.20.52.10.51.10.49.10.48.10.47.10.46.10.15.10.14.10.13.10.12.10.11.10.10.20.9.10.8.10.7.10.6.10.5.30.4.20.3.10.2.1

Sources

CVE-2023-30610 · published · modified · JSON

crates.io/aws-sigv4 CVE-2023-30610: medium 5.5

Logs AWS credentials when TRACE-level logging is enabled

Action: Upgrade aws-sigv4 to 0.2.1 or later.

cargo update -p aws-sigv4 --precise 0.2.1
cargo update -p aws-sigv4 --precise 0.3.1
cargo update -p aws-sigv4 --precise 0.5.3
cargo update -p aws-sigv4 --precise 0.6.1
cargo update -p aws-sigv4 --precise 0.7.1
cargo update -p aws-sigv4 --precise 0.8.1
cargo update -p aws-sigv4 --precise 0.9.1
cargo update -p aws-sigv4 --precise 0.10.2
cargo update -p aws-sigv4 --precise 0.11.1
cargo update -p aws-sigv4 --precise 0.12.1
cargo update -p aws-sigv4 --precise 0.13.1
cargo update -p aws-sigv4 --precise 0.14.1
cargo update -p aws-sigv4 --precise 0.15.1
cargo update -p aws-sigv4 --precise 0.46.1
cargo update -p aws-sigv4 --precise 0.47.1
cargo update -p aws-sigv4 --precise 0.48.1
cargo update -p aws-sigv4 --precise 0.49.1
cargo update -p aws-sigv4 --precise 0.50.1
cargo update -p aws-sigv4 --precise 0.51.1
cargo update -p aws-sigv4 --precise 0.52.1
cargo update -p aws-sigv4 --precise 0.53.2
cargo update -p aws-sigv4 --precise 0.54.2
cargo update -p aws-sigv4 --precise 0.55.1

Affected

introducedfixedlast affected
0.0.0-00.2.1-
0.3.0-00.3.1-
0.4.0-00.5.3-
0.6.0-00.6.1-
0.7.0-00.7.1-
0.8.0-00.8.1-
0.9.0-00.9.1-
0.10.0-00.10.2-
0.11.0-00.11.1-
0.12.0-00.12.1-
0.13.0-00.13.1-
0.14.0-00.14.1-
0.15.0-00.15.1-
0.16.0-00.46.1-
0.47.0-00.47.1-
0.48.0-00.48.1-
0.49.0-00.49.1-
0.50.0-00.50.1-
0.51.0-00.51.1-
0.52.0-00.52.1-
0.53.0-00.53.2-
0.54.0-00.54.2-
0.55.0-00.55.1-

Fixed versions

0.2.10.3.10.5.30.6.10.7.10.8.10.9.10.10.20.11.10.12.10.13.10.14.10.15.10.46.10.47.10.48.10.49.10.50.10.51.10.52.10.53.20.54.20.55.1

Sources

CVE-2023-30610 · published · modified · JSON