DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 60PABhEh382812
Authentication-Results: delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results: delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter: OpenDKIM Filter v2.11.0 delorie.com 60PABhEh382812
Authentication-Results: delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=O+ghpHn2
X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 166544BA902B
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1769335902;
	bh=/NY77TXRAK0coFEJ7PyVOAnlEEtx7FfG24y+y4UnZyY=;
	h=Date:Subject:To:References:In-Reply-To:List-Id:List-Unsubscribe:
	 List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:
	 From;
	b=O+ghpHn233qq8125UcRyN6u3hlXpUD02h7EgiY1jFLMnU0WQbvvbgJ+XCl4pnjQ4D
	 iSiDT+xk3XGL15OvuHubMZ+wpWXgK2JLhQNxZirphBV1PI7bMyghwe2D7Rvvzo9ynp
	 Tv95RPsbEThcmRGI1roF0rBhcmnkKVYaEqiZn9mI=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 375964BA23F2
ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 375964BA23F2
ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1769335852; cv=none;
 b=FAGkZSU/RCfZSBMg7gjcdlO20uSrpXLvlS0FviQmBH4QAC+VIffZq5TJBJVesSsMc7OJNtHqsle+yy2K+IFf6d9fyg/FEaMrfaBl537Y0XcON2U8RPQAnjG9K93BGMJlr68aDWoAmlUQIkPNn+zxmxEyUsZM762rOWFwLqTodtU=
ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key;
 t=1769335852; c=relaxed/simple;
 bh=3Jv6q9Dpa6GI1kXsHjdUH8BbRNIjcekUc1nfsH6JkaE=;
 h=DKIM-Signature:Message-ID:Date:MIME-Version:Subject:From:To;
 b=pY0IrVr/0Gjo8PwA/Cmykc5AYlKEc/2pMhJBeQUGJlH+sI5qXW/lApI/yNaSFznfXqZ9zTG+WZIIpB6jim3tv4n4HbYS8E5MUu6FjNKeaQWZIxc0xYjNMp7u+E93JgVy4Qrr1fZ8YxcSa73Yvdes2CtrwVtvDC46krvUrOW4r6I=
ARC-Authentication-Results: i=1; server2.sourceware.org
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 375964BA23F2
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1769335851; x=1769940651;
 h=content-transfer-encoding:in-reply-to:cc:references:to:from
 :content-language:subject:user-agent:mime-version:date:message-id
 :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id
 :reply-to;
 bh=Vqj5z1eQ91dqsQwJfLjWrjxKl2RTtuxIqmUzZw55BCQ=;
 b=SYd0iKd20f0aWP6osOOK0XjrI57LSIb68cMByra5Zoaog5dyA13AUxPLqV8jPSBHfX
 01hpTh8Sp8NrLsMpPirPCQyytMZHe2xkKaohaeLshxfBL4BtWva3ZBJeYCo/Vyt2GuCx
 J3T0CZ4gFKx/DwnDnL13mRxLoMKg2Muamne/wvBrjXt1JUHc5FOQNog9brRweCmRQnOJ
 NzXIyk17uEOeJBKGzQVf/UmPyVe34FstCGB+tqltOv0tVUPLmvTEDNtGajX0CaeBvOiU
 OvaAdTXeqYxSpPkDzDEZ3vl9wLgPsovgHTSzvfJ2IMy8Amv22jBNXfAsW9UwipX9APWl
 5dSg==
X-Gm-Message-State: AOJu0YyKsH9s1Jk+EehfjSLsZGeVAQDiS0bbhIhaBnEOb3kHWnqPMNrz
 PzdmbUVXTFNpK+F7jjxldQkvJ2GpHfSA6QLMf+S4l5h8k1YvLDylC1jkmet9fQ==
X-Gm-Gg: AZuq6aL6qDoBJzOanyuIYdf+vKRvncqNKSQJtxjeaDxyiUZ3vOdAvfN8g8DFvjmYu4U
 tm88vmplLtduoynJPl7b0OXeJG+5qQKo1dQVeld/IjlgR/2gJ8/Ro8YXyXlG2gCvxktiP5voDqW
 Evd8BYWw+Mqkr6T4yFZGKvh5VlejQdklpr1Ou4lMucVWby7nQWJpiiIVsQh+cNqhcEHcYifvdFW
 SgP5x/rZ+NSkSDLCYLsYKZntGogqufUtzWvvoCulRPveL6QTcAL6fZ+hK8AHpHO/IVCvgasw7CC
 EvKh5vP3Fw92kJFWfjfQq3cExcEdrrqQnPLXWrn/sAMZDWjKvVHNFoVhUrQ7PrV7rybrYx33QXC
 G0EKkt5doKB0QOqhyCoxmwJCuhKhXo7D+3nuox94p20Ux26DdzHaIrQJ8ofvIZtmofkMgftj9O+
 TF6Dx1mBCo4ZTjsgdGSwd3wbbu8wpA+HIAQ3qhKgMxLBVnoXa/cUBfiNP3F1Bb3Uu1nnb2
X-Received: by 2002:a05:600c:310a:b0:480:3b76:6b92 with SMTP id
 5b1f17b1804b1-4805cf67f00mr17084065e9.29.1769335850918; 
 Sun, 25 Jan 2026 02:10:50 -0800 (PST)
Message-ID: <a72878e0-3ab7-4fa0-bcd9-546eb644130b@gmail.com>
Date: Sun, 25 Jan 2026 11:10:49 +0100
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: CVE-2025-13151 and Cygwin package libtasn1_6
Content-Language: en-GB
To: The Cygwin Mailing List <cygwin AT cygwin DOT com>
References: <BN9P111MB2434F33C607CDE0AB042906EB097A AT BN9P111MB2434 DOT NAMP111 DOT PROD DOT OUTLOOK DOT COM>
 <6040d6ad-9d19-4f1b-9a0b-f8b379175830 AT gmail DOT com>
 <87v7gtsfpl DOT fsf AT Gerda DOT invalid>
 <2b687296-0fbd-4b48-867a-0ac8ce38be82 AT gmail DOT com>
 <18d758ba-fa32-46b4-8948-b7b448e52d05 AT SystematicSW DOT ab DOT ca>
 <CAB8Xom8epGnfoFs7LMQAmCuMcobVa5ykeaH_R3Xvei001JVmsA AT mail DOT gmail DOT com>
In-Reply-To: <CAB8Xom8epGnfoFs7LMQAmCuMcobVa5ykeaH_R3Xvei001JVmsA@mail.gmail.com>
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.30
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Marco Atzeri via Cygwin <cygwin AT cygwin DOT com>
Reply-To: Marco Atzeri <marco DOT atzeri AT gmail DOT com>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

On 23/01/2026 12:02, marco atzeri wrote:
> 
> 
> On Fri, 23 Jan 2026, 10:22 Brian Inglis via Cygwin, wrote:
> 

>      > My understanding is that 4.21.0 is safe from this
>      >
>      > https://lists.gnu.org/archive/html/help-libtasn1/2026-01/
>     msg00001.html <https://lists.gnu.org/archive/html/help-
>     libtasn1/2026-01/msg00001.html>
>      >
>      > I am testing the package build on Scallywag
>      > https://cygwin.com/cgi-bin2/jobs.cgi <https://cygwin.com/cgi-
>     bin2/jobs.cgi>
>      >
>      > Locally it passed all tests.
> 
>     Could also do with an update to gnutls 3.8.11?
> 
> 
> I will look during weekend

Ops Brian,
gnutls is NOT orphan.

https://cygwin.com/packages/summary/gnutls-src.html

Takashi,
can you take care ?

Regadrs
Marco




-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple