Commit Graph

2 Commits

Author SHA1 Message Date
github-actions[bot]
0a2faeb871 Assigned RUSTSEC-2022-0070 to secp256k1 (#1481)
Co-authored-by: Shnatsel <Shnatsel@users.noreply.github.com>
2022-12-07 23:29:52 +01:00
Martin Habovštiak
3be728db50 Add soundness bug in secp256k1 API (#1480)
* Add soundness bug in `secp256k1` API

Summary: Unsound API in `secp256k1` allows use-after-free and invalid
deallocation from safe code. This was fixed and backported to multiple
versions.

* Set `date` to the date of the original disclosure

Co-authored-by: Sergey "Shnatsel" Davidoff <shnatsel@gmail.com>
2022-12-07 23:28:57 +01:00