*ring* versions prior to 0.17 are unmaintained. (#2241)

Author: briansmith

crates/ring/RUSTSEC-0000-0000.md

@@ -0,0 +1,20 @@
+```toml
+[advisory]
+id = "RUSTSEC-0000-0000"
+package = "ring"
+date = "2025-03-05"
+informational = "unmaintained"
+url = "https://github.com/briansmith/ring/discussions/2450"
+
+[versions]
+patched = []
+unaffected = [ ">= 0.17" ]
+```
+
+# Versions of *ring* prior to 0.17 are unmaintained.
+
+*ring* 0.16.20 was released over 4 years ago and isn't maintained, tested, etc.
+
+Additionally, the project's general policy is to only patch the latest release,
+which is 0.17.12 now. It will be difficult for anybody to backport future fixes
+to versions earlier than 0.17.10 due to license changes.