Skip to content
OpenAdvisories
Unscored RUSTSEC-2025-0010

Versions of *ring* prior to 0.17 are unmaintained.

Published Mar 5, 2025 · Updated Mar 7, 2025 · Assigned by RUSTSEC

Description

*ring* 0.16.20 was released over 4 years ago and isn't maintained, tested, etc.

Additionally, the project's general policy is to only patch the latest release,
which is 0.17.12 now. It will be difficult for anybody to backport future fixes
to versions earlier than 0.17.10 due to license changes.

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io ring >= 0.0.0-0, < 0.17.0 0.17.0 RUSTSEC-2025-0010

References