RUSTSEC-2021-0076 dependency bump

libsecp256k1 allows overflowing signatures https://rustsec.org/advisories/RUSTSEC-2021-0076
trevor-crypto · Jul 14, 2021 · fd63828 · fd63828
1 parent 993907f
commit fd63828
Show file tree

Hide file tree

Showing 2 changed files with 65 additions and 6 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/primitives/core/Cargo.toml b/primitives/core/Cargo.toml
@@ -49,7 +49,7 @@ schnorrkel = { version = "0.9.1", features = ["preaudit_deprecated", "u64_backen
 sha2 = { version = "0.9.2", default-features = false, optional = true }
 hex = { version = "0.4", default-features = false, optional = true }
 twox-hash = { version = "1.5.0", default-features = false, optional = true }
-libsecp256k1 = { version = "0.3.2", default-features = false, features = ["hmac"], optional = true }
+libsecp256k1 = { version = "0.5.0", default-features = false, features = ["hmac"], optional = true }
 merlin = { version = "2.0", default-features = false, optional = true }
 
 sp-runtime-interface = { version = "4.0.0-dev", default-features = false, path = "../runtime-interface" }