From 590de3c2c6534905bc91976be63b90eb85d4ba8c Mon Sep 17 00:00:00 2001 From: M3gA-Mind Date: Fri, 23 Oct 2026 17:35:22 +0530 Subject: [PATCH] fix(deps): bump ctutils 0.4.2 -> 0.4.4 for RUSTSEC-2026-0385 ctutils 0.4.2 has non-constant-time mask generation and u128 comparisons. 0.4.4 is the first patched release and has the same dependencies. Only the ctutils lock entry changes. This clears the advisory that fails supply-chain and storage-boundary on main. --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 72c8c6c8..e8e9123c 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -550,9 +550,9 @@ dependencies = [ [[package]] name = "ctutils" -version = "0.4.2" +version = "0.4.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7d5515a3834141de9eafb9717ad39eea8247b5674e6066c404e8c4b365d2a29e" +checksum = "12218662ccac37d9714f2191252553d67585b97df8c839cbe49e0bde278dc865" dependencies = [ "cmov", ]