DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 60MGppqP2192546
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org CF6F64BC8978
IronPort-Data: A9a23:pr9tWq6U2l3bG8WNjt0XgAxRtGjGchMFZxGqfqrLsTDasY5as4F+v
 msZWWnUP//YMGKkL40jPty+/UMD7MPVnYI2TwJo+X01Eysa+MHIO4+Ufxz6V8+wwmwvb67FA
 +E2MISowBUcFyeEzvuVGuG/6yE6jufQGuaU5NfsYkhZXRVjRDoqlSVtkus4hp8AqdWiCmthg
 /uqyyHkEAHjgWcc3l48sfrZ9ks25q6q4lv0g3RmDRx1lA6G/5UqJM9HTU2BByOQapVZGOe8W
 9HCwNmRlkvF/w0gA8+Sib3ydEsHWNb6ZWBiXVILM0QKqkEqSh0ais7XBtJFAatko2zhc+RK9
 Tl4ncfYpTHFnkH7sL91vxFwS0mSNEDdkVPNCSDXXce7lyUqf5ZwqhljJBleAGEWxgp4KVFF3
 u00Dj8wV0/Aueipm5GmTeBvmst2eaEHPKtH0p1h5QziIq5/BLzmGeDN79Ie2yosjMdTG/qYf
 9AedTdkcBXHZVtINFkWA59lwrrum2KXnz9w8Q7N4/NopTGPkkori+mF3Nn9I7RmQe1Xk0iWv
 G/XuWr+GgkXHMGEjzOLtHetgocjmAuhCd1LReTlrKYCbFu7x0FMIQYQRAOHv8Kn12uRf81BN
 BRO9X97xUQ13AnxJjXnZDWzsXGbvxg0UMtfDOw8rgqKz8LpDx2xXzRcCGceLoV66olsHm1CO
 kK1ou4FzAdH6NW9IU9xPJ/Oxd9uEUD59VM/WBI=
IronPort-HdrOrdr: A9a23:7hdtJ6AD2JkLc+vlHem155DYdb4zR+YMi2TDsHoBKiC9E/b5qy
 nApp4mPHPP5Qr5O0tApTnjAsK9qBrnnPZICOIqUotKMjOLhILSFu9f0bc=
To: "cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
Subject: CVE-2025-13151 and Cygwin package libtasn1_6
Thread-Topic: CVE-2025-13151 and Cygwin package libtasn1_6
Thread-Index: AdyLvphvZrY3ugK4Rn68R9lgqE2ZhQ==
Date: Thu, 22 Jan 2026 16:50:50 +0000
Message-ID: <BN9P111MB2434F33C607CDE0AB042906EB097A@BN9P111MB2434.NAMP111.PROD.OUTLOOK.COM>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?HoYx0gfPeHZfWdw5BQtzran+883kAqVFq+lmQguDD2eXe9vZfB9qQVCgN2IA?=
 =?us-ascii?Q?NdMRpzSqtgaLtlNDO3RYIht3+fSGyma2oKdxsGCEfCC+JtxNbIDw9UPxXgHi?=
 =?us-ascii?Q?P4OWgEBh2jFU1VF5grx8TuaPBclZvNOTOWLGHJWOm9YECdv4vYIYxXBe1Aca?=
 =?us-ascii?Q?rQ3ylt0lPeYzaPsEdN89InEe+uU4QO5pUZKzbd9cR8pJH2JjlGStfsPh0JNT?=
 =?us-ascii?Q?U4lE+jiyRlqrdT4D70LgcvyI09dcNfYgD71GtNgWeke3P11wjtFwNAYKpZwC?=
 =?us-ascii?Q?VPtaiM+arLPzVrLiBQs9jK8rngc/Ers6cu2lVpes1I499cYTYM9Z/zrpfJSu?=
 =?us-ascii?Q?WLSU27s+RcPk5ns4h7tdJ12fhsXxEwLj999fqUjBYUmiZcziAhZjcwIhp7/0?=
 =?us-ascii?Q?/fYru1kS8JZMRDVYGNgebk/WdnHRhYtuf3iAsR/hF3gDoJqLuCo4NbXCCm3I?=
 =?us-ascii?Q?4PzDcD0V21ZQsy/Bj5jZDYC+XKDW+Uth3tRoZLM3WOg0fJNwr7Mr9vfoWjIa?=
 =?us-ascii?Q?jXGvysZTdxPaCbhvx66VWcsZ5pfe+3pEKV0n0RmqS57CRwRZJCex7K1nwcRh?=
 =?us-ascii?Q?eKB1rbInKIJPvijT1oPJ/TGFRWmjZCHCsVfGNCJMKCG1cK//KKFGhr9edlcF?=
 =?us-ascii?Q?pWztFMJX9uhJDhdc2y023X6aJyyyZVL+LcDz11X5r36LYK7qlh8CjsclrKXS?=
 =?us-ascii?Q?2U/cf1/phnfv2kaOMaEA6Ja+qyqKC1rmH9Kp0rbBD1BFUmd5BtTLfYUVyvYW?=
 =?us-ascii?Q?wHWkDuJah7HjF80nhnxCfWi9BYWamHDiPGURU20mMy0ml4JJ+w4EtlKcs/lA?=
 =?us-ascii?Q?VP/h6mvShF1fME7OiKw1EnMIOmqa3vZZ/qQonJQzXyyUlPzkaYX1pHOoUIUH?=
 =?us-ascii?Q?ZZP2uvIiqV8YPgI/jyEb9JERBpFmDwpZrhhlU3w8nf4PXRCFdx/bJ/cqua5s?=
 =?us-ascii?Q?dNmo/xnqbL8ZNyOGoDJsKe+4dfxTjoDVW58kvkvH1PtZ70ikSFHPEe/tfGCz?=
 =?us-ascii?Q?N+mirMqlDRZIRZCvgOC1h6LuFyoMHsL8a0zs3GHwR/2lDQhIybpiLXuxc+8s?=
 =?us-ascii?Q?oUTMATe2AY5H48nfj8JdI6Ccn15Wr9nDKDJQSuJw5d5yxx7K1rkCQ9DHfjvm?=
 =?us-ascii?Q?eiWK6DxHlcjB5je98bHS6Tf9SzkVe6vTbY58qCRzXdke6XaOY/DEtmvw0e3+?=
 =?us-ascii?Q?npc8vWDp17m/KYxaE93aV70bHGvsdkOF1D4qk6ueM2tvtcGUCsiVUYnwdw8S?=
 =?us-ascii?Q?Z9QTqPRF4dNt7hh3lSgmOh0tc3WKUHsSvVgGfnLKbj/IC0h6hTzlGdpWz0YJ?=
 =?us-ascii?Q?GgeGBJJqw3FqAmsOrtFqj+GHjSFZMCRKv9iyIbXd4lL43S3hEdQY88WZrrHl?=
 =?us-ascii?Q?6+A/UrVEDI//TWmeRIcV5+5zg1MNojwuReMXU7Y1VBp6IYj9LT2QFMsmuaJ5?=
 =?us-ascii?Q?fyJWrUkd/lRHclEAw5i7H5VPn2iqdvhzJREwomUxc2CpP/oK/CuOkI1SCmaL?=
 =?us-ascii?Q?xpuCuAm4uRVo8fObf52iXaUXRYgtIeT3urX4?=
MIME-Version: 1.0
X-OriginatorOrg: us.af.mil
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN9P111MB2434.NAMP111.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 4a6d1db1-265b-486e-35ed-08de59d66605
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jan 2026 16:50:50.2020 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 8331b18d-2d87-48ef-a35f-ac8818ebf9b4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PHZP111MB2683
X-Content-Filtered-By: Mailman/MimeDel 2.1.30
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.30
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: "FOPPE,
 JEFFREY B CIV USAF AFMC AFLCMC/WFRQ via Cygwin" <cygwin AT cygwin DOT com>
Reply-To: "FOPPE,
 JEFFREY B CIV USAF AFMC AFLCMC/WFRQ" <jeffrey DOT foppe AT us DOT af DOT mil>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

CVE-2025-13151 points out a vulnerability in libtasn1 versions 4.20 and earlier.  The version provided through Cygwin is much earlier.  It doesn't look like this package has been updated since 2019 and is listed as Orphaned.  A lot of other packages seem to depend on it.  Does anyone know if a developer will look at updating this?


Jeff Foppe


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple