DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 60MHEb4x2200471
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 74DD24BA2E2E
Message-ID: <6040d6ad-9d19-4f1b-9a0b-f8b379175830@gmail.com>
Date: Thu, 22 Jan 2026 18:13:45 +0100
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: CVE-2025-13151 and Cygwin package libtasn1_6
Content-Language: en-GB
To: cygwin AT cygwin DOT com
References: <BN9P111MB2434F33C607CDE0AB042906EB097A AT BN9P111MB2434 DOT NAMP111 DOT PROD DOT OUTLOOK DOT COM>
In-Reply-To: <BN9P111MB2434F33C607CDE0AB042906EB097A@BN9P111MB2434.NAMP111.PROD.OUTLOOK.COM>
From: Marco Atzeri via Cygwin <cygwin AT cygwin DOT com>
Reply-To: Marco Atzeri <marco DOT atzeri AT gmail DOT com>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

On 22/01/2026 17:50, FOPPE, JEFFREY B CIV USAF AFMC AFLCMC/WFRQ via 
Cygwin wrote:
> CVE-2025-13151 points out a vulnerability in libtasn1 versions 4.20 and earlier.  The version provided through Cygwin is much earlier.  It doesn't look like this package has been updated since 2019 and is listed as Orphaned.  A lot of other packages seem to depend on it.  Does anyone know if a developer will look at updating this?
> 
> 
> Jeff Foppe
> 
> 
Looking on it

Regards
Marco


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple