tocsin

crates.io/secp256k1: unknown

Unsound API in `secp256k1` allows use-after-free and invalid deallocation from safe code

Action: Upgrade secp256k1 to 0.22.2 or later.

cargo update -p secp256k1 --precise 0.22.2
cargo update -p secp256k1 --precise 0.23.5
cargo update -p secp256k1 --precise 0.24.2

Affected

introducedfixedlast affected
0.14.00.22.2-
0.23.00.23.5-
0.24.00.24.2-

Fixed versions

0.22.20.23.50.24.2

Sources

published · modified · JSON