Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 Secret Exposure via Debug

What could go wrong?

Microsoft fixed a security weakness. Details are limited to avoid helping attackers.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

azl3 kata-containers 4.1.0.kata1-2 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-23 on Azure Linux 3.0, azl3 rust 1.75.0-31 on Azure Linux 3.0, azl3 rust 1.98.1-1 on Azure Linux 3.0, azl3 rust-afterburn 5.8.2-2 on Azure Linux 3.0

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: no KB article listed. Official page.