Update ring crate for RUSTSEC-2025-0009 #423

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

Funnyklown wants to merge 1 commit into Keats:master from Funnyklown:master

Funnyklown commented Mar 10, 2025

No description provided.


          Update ring crate for RUSTSEC-2025-0009

f491ce2

rimutaka commented Mar 11, 2025

The RUSTSEC in question: https://rustsec.org/advisories/RUSTSEC-2025-0009.html

There was a problem with ring's maintenance that was resolved:

the original maintainer stepped down
someone else stepped in
the original maintainer came back

There was no hostile takeover or anything untowards by the looks of it.

related RUSTSEC: https://rustsec.org/advisories/RUSTSEC-2025-0007.html
Reddit discussion of the above: https://www.reddit.com/r/rust/comments/1iv6myf/ring_is_unmaintained/

It seems safe and sensible to update to the latest version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet