RUSTSEC-2025-0010: Versions of *ring* prior to 0.17 are unmaintained. #4442
Description
Versions of ring prior to 0.17 are unmaintained.
| Details | |
|---|---|
| Status | unmaintained |
| Package | ring |
| Version | 0.16.20 |
| URL | briansmith/ring#2450 |
| Date | 2025-03-05 |
ring 0.16.20 was released over 4 years ago and isn't maintained, tested, etc.
Additionally, the project's general policy is to only patch the latest release,
which is 0.17.12 now. It will be difficult for anybody to backport future fixes
to versions earlier than 0.17.10 due to license changes.
See advisory page for additional details.