From cf036e1ffad3340fcf1c7559d0032493ccc08e6e Mon Sep 17 00:00:00 2001 From: Richard Moore Date: Sun, 24 Nov 2019 23:53:18 +0900 Subject: [PATCH] Update elliptic package to protect from Minerva timing attack (#666). --- packages/signing-key/package.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/packages/signing-key/package.json b/packages/signing-key/package.json index b81fea78a0..1f14b15ede 100644 --- a/packages/signing-key/package.json +++ b/packages/signing-key/package.json @@ -4,7 +4,7 @@ "@ethersproject/bytes": ">=5.0.0-beta.129", "@ethersproject/logger": ">=5.0.0-beta.129", "@ethersproject/properties": ">=5.0.0-beta.131", - "elliptic": "6.5.0" + "elliptic": "6.5.2" }, "description": "Elliptic curve library functions for the secp256k1 curve.", "ethereum": "donations.ethers.eth", @@ -26,7 +26,7 @@ "scripts": { "test": "echo \"Error: no test specified\" && exit 1" }, - "tarballHash": "0x15e0a1cdc7f39f0c2a05638babfc2ff86ca11bdc92b01549fbabe10cb594aa58", + "tarballHash": "0x362ba6d101842859c8aa83120e4cec9d3970d345e681cba20c9fcf84838410fb", "types": "./lib/index.d.ts", - "version": "5.0.0-beta.134" + "version": "5.0.0-beta.135" }