DMARC-Filter:	OpenDMARC Filter v1.4.2 delorie.com 60MGppqP2192546
Authentication-Results:	delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results:	delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter:	OpenDKIM Filter v2.11.0 delorie.com 60MGppqP2192546
Authentication-Results:	delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=V90Sq1yX
X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org B9BD34BC898C
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1769100709;
	bh=HzjK08/8dSa5SvDnEYStWvadA4GwgLHaeBgCyOUWIew=;
	h=To:Subject:Date:List-Id:List-Unsubscribe:List-Archive:List-Post:
	List-Help:List-Subscribe:From:Reply-To:From;
	b=V90Sq1yX81snDD+03Y/f8rRuYY9L5eO3lWJoCEB7XOhvjP2VasEkzN4VYp+jiG1Uk
	ottAZf3ZHachR1yEOWpZM4kzsqSCO3xpLyDOB6hq+WjizjOPBYElRu6qKZz8MG3+jj
	9F+qmQxR4GQZS91uvGHFY8PGNh1Ca7oEu6Vga0Pg=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.2 sourceware.org CF6F64BC8978
ARC-Filter:	OpenARC Filter v1.0.0 sourceware.org CF6F64BC8978
ARC-Seal:	i=2; a=rsa-sha256; d=sourceware.org; s=key; t=1769100656; cv=pass;
	b=tvRy7QppMAV+9juj4GPk6xqJ25HlXGmgfZiq9JGAmp4e/8fCy31PMS+mK3DpXJzc7HbKbccTYy1BpmThVOjGEuFYj5INEYrA3iUYViJ9Z8rDiyU4JHEpZw40l1ynmJRzDpCkk2t6w/CkUWNszYxvWe9wWDHn9r/xKwMhXgHJFQk=
ARC-Message-Signature:	i=2; a=rsa-sha256; d=sourceware.org; s=key;
	t=1769100656; c=relaxed/simple;
	bh=TaYQnJ3Gyq6hyPEirf2Ws0S37+c5QHeVJod6iqyk2DE=;
	h=DKIM-Signature:From:To:Subject:Date:Message-ID:MIME-Version;
	b=g6/p8HYlNqJwulX1LeURHMtlu7AAEpCV7l0+XQ4DbEihD1xoaMLa94fFyKt8E4yvtBgDaxzWKYdYBbiBI0hrbb2aXS4cYkm2l2vjKK7E2JQFvxjPipyR7NNsWMb4B2k0J8+j1vQYOj9SZJVDtbWjOHEtbJTPlWzeLMxPcygjb4A=
ARC-Authentication-Results:	i=2; server2.sourceware.org
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org CF6F64BC8978
X-CSE-ConnectionGUID:	XcCyDNgUQ7+Vbw3Kuoaktg==
X-CSE-MsgGUID:	iE7Asny0TvSv5MGLwvw02g==
X-EEMSG-check-017:	297191520|UCOL19PA53_Out05.csd.disa.mil
IronPort-Data:	A9a23:pr9tWq6U2l3bG8WNjt0XgAxRtGjGchMFZxGqfqrLsTDasY5as4F+v
	msZWWnUP//YMGKkL40jPty+/UMD7MPVnYI2TwJo+X01Eysa+MHIO4+Ufxz6V8+wwmwvb67FA
	+E2MISowBUcFyeEzvuVGuG/6yE6jufQGuaU5NfsYkhZXRVjRDoqlSVtkus4hp8AqdWiCmthg
	/uqyyHkEAHjgWcc3l48sfrZ9ks25q6q4lv0g3RmDRx1lA6G/5UqJM9HTU2BByOQapVZGOe8W
	9HCwNmRlkvF/w0gA8+Sib3ydEsHWNb6ZWBiXVILM0QKqkEqSh0ais7XBtJFAatko2zhc+RK9
	Tl4ncfYpTHFnkH7sL91vxFwS0mSNEDdkVPNCSDXXce7lyUqf5ZwqhljJBleAGEWxgp4KVFF3
	u00Dj8wV0/Aueipm5GmTeBvmst2eaEHPKtH0p1h5QziIq5/BLzmGeDN79Ie2yosjMdTG/qYf
	9AedTdkcBXHZVtINFkWA59lwrrum2KXnz9w8Q7N4/NopTGPkkori+mF3Nn9I7RmQe1Xk0iWv
	G/XuWr+GgkXHMGEjzOLtHetgocjmAuhCd1LReTlrKYCbFu7x0FMIQYQRAOHv8Kn12uRf81BN
	BRO9X97xUQ13AnxJjXnZDWzsXGbvxg0UMtfDOw8rgqKz8LpDx2xXzRcCGceLoV66olsHm1CO
	kK1ou4FzAdH6NW9IU9xPJ/Oxd9uEUD59VM/WBI=
IronPort-HdrOrdr:	A9a23:7hdtJ6AD2JkLc+vlHem155DYdb4zR+YMi2TDsHoBKiC9E/b5qy
	nApp4mPHPP5Qr5O0tApTnjAsK9qBrnnPZICOIqUotKMjOLhILSFu9f0bc=
X-Talos-CUID:	=?us-ascii?q?9a23=3APcM2NGnL9WJU9AzK8o8Pb4hEjHzXOU3W52b8BUC?=
	=?us-ascii?q?FMDkqdreKEnyN/6pnj8U7zg=3D=3D?=
X-Talos-MUID:	=?us-ascii?q?9a23=3AR3zr6g6bkUdwTaCO0jqPx4L0xoxpzvuHE0Ycyak?=
	=?us-ascii?q?YgNfZEANUJCmC1G64F9o=3D?=
ARC-Seal:	i=1; a=rsa-sha256; s=arcselector5501; d=microsoft.com; cv=none;
	b=ZGOUFPfqeM9H9fP4sh3RLMZqlKy0bNW8gHHl3z8SdPOUpl12lWdh0dD78BesJfk7aYbngvtv95vgA9UtOgOHWcPO6eFPcQpxVHeiLrqAa3NfP/Tf14RKLqJ3WTfTuS+DZD8kLa5O6c5e1MiO7ZB97fz+mSyYEaa6dEzKwW/u+nbSAJdwIKrmrycyw6qIlNnL2PFXR9hgcAqM/CVU9EKwpMfOx5lYjXDFMBC4bbhvUGJCIC3NlqmOffIWt5rRv6lZlV6rSDfSN+p+1aWcRYnuWt9i5Jt0iIpQrCRWeeWz/5xUAgu+sY0QNk8wLiVsFxEnBVIMH4uN0JYZiMsMzlHNIA==
ARC-Message-Signature:	i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
	s=arcselector5501;
	h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
	bh=6KEayrDZHuKySmN7TPUHV6EPlgi1KvJnqXeNhVx0PDU=;
	b=SqAv5y/KPhuTCtjJdYgbhOFQpkVZCCjgjYN7XL8Zs0szLpIDh4XMZ6djJwXZd2Rv5UeqjX7uiAY6riMCZxMzWfN1CsZLu5bPGOS33sPtflzz2B2NqQT85grzEGKmLNqa4DWYBAzwbZwiUakUApndAX9VHOic/e6vijtyj6Y0IFPnjoBfBhYOrwtlDljx9tR1GtekO9FRg/2v/cEY7TPNG1wiOZB2zUe8dhiyA6Qw7Cd8expJ9PWVJf7P7kmwK+OyucUU31RRThSOrWPMgcWr2w+DH+V47fr+mNvKmk+9Erpc2CkcArm5b9iKtInSrpiwl5jfIbYAwZAMkfFK0/a1Eg==
ARC-Authentication-Results:	i=1; mx.microsoft.com 1; spf=pass
	smtp.mailfrom=us.af.mil; dmarc=pass action=none header.from=us.af.mil;
	dkim=pass header.d=us.af.mil; arc=none
To:	"cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
Subject:	CVE-2025-13151 and Cygwin package libtasn1_6
Thread-Topic:	CVE-2025-13151 and Cygwin package libtasn1_6
Thread-Index:	AdyLvphvZrY3ugK4Rn68R9lgqE2ZhQ==
Date:	Thu, 22 Jan 2026 16:50:50 +0000
Message-ID:	<BN9P111MB2434F33C607CDE0AB042906EB097A@BN9P111MB2434.NAMP111.PROD.OUTLOOK.COM>
Accept-Language:	en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-publictraffictype:	Email
x-ms-traffictypediagnostic:	BN9P111MB2434:EE_|PHZP111MB2683:EE_
x-ms-office365-filtering-correlation-id:	4a6d1db1-265b-486e-35ed-08de59d66605
x-ms-exchange-senderadcheck:	1
x-microsoft-antispam:	BCL:0;
	ARA:13230040|366016|1800799024|8096899003|38070700021;
x-microsoft-antispam-message-info:	=?us-ascii?Q?ETV8fS9GijT7fWP/JJVAMbMvsbXdyid8rc8mzczASl3Cvv4xvduTQpaMPnxv?=
	=?us-ascii?Q?92mxxuoAu22hkNxgq5l3trxJsDR9Bi1WMkWM4ylZLn407TmW5CLzYXLygFxt?=
	=?us-ascii?Q?joUSqFd2myaqcRo0tFt4At0+GDscwqiFUUoeXslfqSeMTzwag0ePOW9zvPiE?=
	=?us-ascii?Q?eTAMI1fp//YYLMTIo6il2UpLFQqxcpjHV1zL5zueaHPrM3XJ6mLEeAZSJPct?=
	=?us-ascii?Q?9oMv9enavlOTxddOvyRZOt/m3jMG6MvBt/EDUyuIRDZ5Rt9DXIfZQUTJLxjD?=
	=?us-ascii?Q?al4Iwm+R/2QFqUnIE4q7c/DVshddcrBX04eihzL2xV+FA2JJJST3/n/S/tMb?=
	=?us-ascii?Q?C/APzeMhGVIHaqgdcatdIdPH8bSViMX5DQfw6HMMTPDizRtF7iccHBaVo6zs?=
	=?us-ascii?Q?A2Zrx21Y3McxAYt9I/ix5r5W7xif+CQVfgOWZuoIk7riCo33a/jWyE2OPRnK?=
	=?us-ascii?Q?k90oRDfxVf08SBjG+qj3ZbrL2NvcG1AqKylWREgrhCPRhm0cW3s4bQ/wNW98?=
	=?us-ascii?Q?bc2FGMyvTvouUTJ0REW6Al8pZH2DrUvxO+VWEzYP6yNLYIvAVk2pJhrs/jCT?=
	=?us-ascii?Q?jUkp/wSx3zPcuARNV+0ajbTCLOnQCsVds6ULCgPzik0+uopPNkINB7MZdZzj?=
	=?us-ascii?Q?GzqQ2xeiypKJkF7Zf5xPPrqnPDLsDL8OJTCSlXRoiDcf4RAM1GJCz0iAA7ue?=
	=?us-ascii?Q?VEjjskzqvw0slQuMIP/p99+5qvAnwT0aNvM8U0jgrpsu11A9cgnbMADvs2MG?=
	=?us-ascii?Q?6Ko0m9HkzVriH37PlJcg1d0v402rAEfg6DWDz5TDt3BXHaWFC3/jfjAr3DE8?=
	=?us-ascii?Q?B1RaDXuUoyH0GZHYUtil5WBvyr8Z04zebmuA33T4e2J4V+SQZVXGvZO1ZmlY?=
	=?us-ascii?Q?0D4ca53Pjkljfo9rYCQ2FJE+QBQhE23CBan54Qfr9RuZwTyKrDv/N5KTPdrL?=
	=?us-ascii?Q?jH98GLCM1qpqARHDFjEzXuctze/uEmjKCOOtsU4AnvHxgKoYE45/nJaGQK2J?=
	=?us-ascii?Q?SL4P+BZdzzdthk+xMWV9A7DNluemyYa19fSVYHb9hHd8799qxbovUk00WYUE?=
	=?us-ascii?Q?VhoaWc+l8vhLmLbBa44MLWXrWSbUltWTfcqL0lTf1juQ9trWnD3rmQiVrKLq?=
	=?us-ascii?Q?FzhCXUBGcceUIHCK/Ph1ueprhlBeyo/57ub6qa5hIQkPrUWfump2bNy372Mb?=
	=?us-ascii?Q?IP2EbHDy2Euo3OxGPA2pWLG/PBCifvfQvOVMd4I5Bqdz2VTT77nGC908d+cw?=
	=?us-ascii?Q?X2gHzEEmBY9TuTGqLDN/bSLslMrV6fweVfOo9T7TBHrgfdWQSYoTrietWeK5?=
	=?us-ascii?Q?YFst9ybBbucEU7Gm06Xf5MQ+atIN8yRdg4aujMGC/HAI9Hvta/ytJGo01HBc?=
	=?us-ascii?Q?YsNceh0jwTomkup78nyMVmnoomDYdBSgQgKrKiGBLC/uhBjEkl5zRIAVHo4c?=
	=?us-ascii?Q?imsUml3wYbwAX6y++XL3hVaNJITb1wvhqLeXflpC5uZRK+FeMBd+BASlCAKU?=
	=?us-ascii?Q?DSQncJdANpWYMJX9ecHvdugDYBDxyWwq1BbONKozZO6KLIn6knHbSj9uOde0?=
	=?us-ascii?Q?+/2bvV8803BAzRHmTf0AjyEy80oKEClEN6EwBuSOcr8C5JFBJMupWObDtLfP?=
	=?us-ascii?Q?PgjfMVtmrDAFApsT4s7ukVQ=3D?=
x-forefront-antispam-report:	CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;
	IPV:NLI; SFV:NSPM; H:BN9P111MB2434.NAMP111.PROD.OUTLOOK.COM; PTR:; CAT:NONE;
	SFS:(13230040)(366016)(1800799024)(8096899003)(38070700021); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount:	1
x-ms-exchange-antispam-messagedata-0:	=?us-ascii?Q?HoYx0gfPeHZfWdw5BQtzran+883kAqVFq+lmQguDD2eXe9vZfB9qQVCgN2IA?=
	=?us-ascii?Q?NdMRpzSqtgaLtlNDO3RYIht3+fSGyma2oKdxsGCEfCC+JtxNbIDw9UPxXgHi?=
	=?us-ascii?Q?P4OWgEBh2jFU1VF5grx8TuaPBclZvNOTOWLGHJWOm9YECdv4vYIYxXBe1Aca?=
	=?us-ascii?Q?rQ3ylt0lPeYzaPsEdN89InEe+uU4QO5pUZKzbd9cR8pJH2JjlGStfsPh0JNT?=
	=?us-ascii?Q?U4lE+jiyRlqrdT4D70LgcvyI09dcNfYgD71GtNgWeke3P11wjtFwNAYKpZwC?=
	=?us-ascii?Q?VPtaiM+arLPzVrLiBQs9jK8rngc/Ers6cu2lVpes1I499cYTYM9Z/zrpfJSu?=
	=?us-ascii?Q?WLSU27s+RcPk5ns4h7tdJ12fhsXxEwLj999fqUjBYUmiZcziAhZjcwIhp7/0?=
	=?us-ascii?Q?/fYru1kS8JZMRDVYGNgebk/WdnHRhYtuf3iAsR/hF3gDoJqLuCo4NbXCCm3I?=
	=?us-ascii?Q?4PzDcD0V21ZQsy/Bj5jZDYC+XKDW+Uth3tRoZLM3WOg0fJNwr7Mr9vfoWjIa?=
	=?us-ascii?Q?jXGvysZTdxPaCbhvx66VWcsZ5pfe+3pEKV0n0RmqS57CRwRZJCex7K1nwcRh?=
	=?us-ascii?Q?eKB1rbInKIJPvijT1oPJ/TGFRWmjZCHCsVfGNCJMKCG1cK//KKFGhr9edlcF?=
	=?us-ascii?Q?pWztFMJX9uhJDhdc2y023X6aJyyyZVL+LcDz11X5r36LYK7qlh8CjsclrKXS?=
	=?us-ascii?Q?2U/cf1/phnfv2kaOMaEA6Ja+qyqKC1rmH9Kp0rbBD1BFUmd5BtTLfYUVyvYW?=
	=?us-ascii?Q?wHWkDuJah7HjF80nhnxCfWi9BYWamHDiPGURU20mMy0ml4JJ+w4EtlKcs/lA?=
	=?us-ascii?Q?VP/h6mvShF1fME7OiKw1EnMIOmqa3vZZ/qQonJQzXyyUlPzkaYX1pHOoUIUH?=
	=?us-ascii?Q?ZZP2uvIiqV8YPgI/jyEb9JERBpFmDwpZrhhlU3w8nf4PXRCFdx/bJ/cqua5s?=
	=?us-ascii?Q?dNmo/xnqbL8ZNyOGoDJsKe+4dfxTjoDVW58kvkvH1PtZ70ikSFHPEe/tfGCz?=
	=?us-ascii?Q?N+mirMqlDRZIRZCvgOC1h6LuFyoMHsL8a0zs3GHwR/2lDQhIybpiLXuxc+8s?=
	=?us-ascii?Q?oUTMATe2AY5H48nfj8JdI6Ccn15Wr9nDKDJQSuJw5d5yxx7K1rkCQ9DHfjvm?=
	=?us-ascii?Q?eiWK6DxHlcjB5je98bHS6Tf9SzkVe6vTbY58qCRzXdke6XaOY/DEtmvw0e3+?=
	=?us-ascii?Q?npc8vWDp17m/KYxaE93aV70bHGvsdkOF1D4qk6ueM2tvtcGUCsiVUYnwdw8S?=
	=?us-ascii?Q?Z9QTqPRF4dNt7hh3lSgmOh0tc3WKUHsSvVgGfnLKbj/IC0h6hTzlGdpWz0YJ?=
	=?us-ascii?Q?GgeGBJJqw3FqAmsOrtFqj+GHjSFZMCRKv9iyIbXd4lL43S3hEdQY88WZrrHl?=
	=?us-ascii?Q?6+A/UrVEDI//TWmeRIcV5+5zg1MNojwuReMXU7Y1VBp6IYj9LT2QFMsmuaJ5?=
	=?us-ascii?Q?fyJWrUkd/lRHclEAw5i7H5VPn2iqdvhzJREwomUxc2CpP/oK/CuOkI1SCmaL?=
	=?us-ascii?Q?xpuCuAm4uRVo8fObf52iXaUXRYgtIeT3urX4?=
MIME-Version:	1.0
X-OriginatorOrg:	us.af.mil
X-MS-Exchange-CrossTenant-AuthAs:	Internal
X-MS-Exchange-CrossTenant-AuthSource:	BN9P111MB2434.NAMP111.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id:	4a6d1db1-265b-486e-35ed-08de59d66605
X-MS-Exchange-CrossTenant-originalarrivaltime:	22 Jan 2026 16:50:50.2020 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader:	Hosted
X-MS-Exchange-CrossTenant-id:	8331b18d-2d87-48ef-a35f-ac8818ebf9b4
X-MS-Exchange-Transport-CrossTenantHeadersStamped:	PHZP111MB2683
X-Content-Filtered-By:	Mailman/MimeDel 2.1.30
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.30
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	"FOPPE,
	JEFFREY B CIV USAF AFMC AFLCMC/WFRQ via Cygwin" <cygwin AT cygwin DOT com>
Reply-To:	"FOPPE,
	JEFFREY B CIV USAF AFMC AFLCMC/WFRQ" <jeffrey DOT foppe AT us DOT af DOT mil>
Sender:	"Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

CVE-2025-13151 points out a vulnerability in libtasn1 versions 4.20 and earlier.  The version provided through Cygwin is much earlier.  It doesn't look like this package has been updated since 2019 and is listed as Orphaned.  A lot of other packages seem to depend on it.  Does anyone know if a developer will look at updating this?


Jeff Foppe


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -