DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 60MGppqP2192546
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org CF6F64BC8978
IronPort-Data: A9a23:pr9tWq6U2l3bG8WNjt0XgAxRtGjGchMFZxGqfqrLsTDasY5as4F+v
 msZWWnUP//YMGKkL40jPty+/UMD7MPVnYI2TwJo+X01Eysa+MHIO4+Ufxz6V8+wwmwvb67FA
 +E2MISowBUcFyeEzvuVGuG/6yE6jufQGuaU5NfsYkhZXRVjRDoqlSVtkus4hp8AqdWiCmthg
 /uqyyHkEAHjgWcc3l48sfrZ9ks25q6q4lv0g3RmDRx1lA6G/5UqJM9HTU2BByOQapVZGOe8W
 9HCwNmRlkvF/w0gA8+Sib3ydEsHWNb6ZWBiXVILM0QKqkEqSh0ais7XBtJFAatko2zhc+RK9
 Tl4ncfYpTHFnkH7sL91vxFwS0mSNEDdkVPNCSDXXce7lyUqf5ZwqhljJBleAGEWxgp4KVFF3
 u00Dj8wV0/Aueipm5GmTeBvmst2eaEHPKtH0p1h5QziIq5/BLzmGeDN79Ie2yosjMdTG/qYf
 9AedTdkcBXHZVtINFkWA59lwrrum2KXnz9w8Q7N4/NopTGPkkori+mF3Nn9I7RmQe1Xk0iWv
 G/XuWr+GgkXHMGEjzOLtHetgocjmAuhCd1LReTlrKYCbFu7x0FMIQYQRAOHv8Kn12uRf81BN
 BRO9X97xUQ13AnxJjXnZDWzsXGbvxg0UMtfDOw8rgqKz8LpDx2xXzRcCGceLoV66olsHm1CO
 kK1ou4FzAdH6NW9IU9xPJ/Oxd9uEUD59VM/WBI=
IronPort-HdrOrdr: A9a23:7hdtJ6AD2JkLc+vlHem155DYdb4zR+YMi2TDsHoBKiC9E/b5qy
 nApp4mPHPP5Qr5O0tApTnjAsK9qBrnnPZICOIqUotKMjOLhILSFu9f0bc=
To: "cygwin@cygwin.com" <cygwin@cygwin.com>
Subject: CVE-2025-13151 and Cygwin package libtasn1_6
Thread-Topic: CVE-2025-13151 and Cygwin package libtasn1_6
Thread-Index: AdyLvphvZrY3ugK4Rn68R9lgqE2ZhQ==
Date: Thu, 22 Jan 2026 16:50:50 +0000
Message-ID: <BN9P111MB2434F33C607CDE0AB042906EB097A@BN9P111MB2434.NAMP111.PROD.OUTLOOK.COM>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?HoYx0gfPeHZfWdw5BQtzran+883kAqVFq+lmQguDD2eXe9vZfB9qQVCgN2IA?=
 =?us-ascii?Q?NdMRpzSqtgaLtlNDO3RYIht3+fSGyma2oKdxsGCEfCC+JtxNbIDw9UPxXgHi?=
 =?us-ascii?Q?P4OWgEBh2jFU1VF5grx8TuaPBclZvNOTOWLGHJWOm9YECdv4vYIYxXBe1Aca?=
 =?us-ascii?Q?rQ3ylt0lPeYzaPsEdN89InEe+uU4QO5pUZKzbd9cR8pJH2JjlGStfsPh0JNT?=
 =?us-ascii?Q?U4lE+jiyRlqrdT4D70LgcvyI09dcNfYgD71GtNgWeke3P11wjtFwNAYKpZwC?=
 =?us-ascii?Q?VPtaiM+arLPzVrLiBQs9jK8rngc/Ers6cu2lVpes1I499cYTYM9Z/zrpfJSu?=
 =?us-ascii?Q?WLSU27s+RcPk5ns4h7tdJ12fhsXxEwLj999fqUjBYUmiZcziAhZjcwIhp7/0?=
 =?us-ascii?Q?/fYru1kS8JZMRDVYGNgebk/WdnHRhYtuf3iAsR/hF3gDoJqLuCo4NbXCCm3I?=
 =?us-ascii?Q?4PzDcD0V21ZQsy/Bj5jZDYC+XKDW+Uth3tRoZLM3WOg0fJNwr7Mr9vfoWjIa?=
 =?us-ascii?Q?jXGvysZTdxPaCbhvx66VWcsZ5pfe+3pEKV0n0RmqS57CRwRZJCex7K1nwcRh?=
 =?us-ascii?Q?eKB1rbInKIJPvijT1oPJ/TGFRWmjZCHCsVfGNCJMKCG1cK//KKFGhr9edlcF?=
 =?us-ascii?Q?pWztFMJX9uhJDhdc2y023X6aJyyyZVL+LcDz11X5r36LYK7qlh8CjsclrKXS?=
 =?us-ascii?Q?2U/cf1/phnfv2kaOMaEA6Ja+qyqKC1rmH9Kp0rbBD1BFUmd5BtTLfYUVyvYW?=
 =?us-ascii?Q?wHWkDuJah7HjF80nhnxCfWi9BYWamHDiPGURU20mMy0ml4JJ+w4EtlKcs/lA?=
 =?us-ascii?Q?VP/h6mvShF1fME7OiKw1EnMIOmqa3vZZ/qQonJQzXyyUlPzkaYX1pHOoUIUH?=
 =?us-ascii?Q?ZZP2uvIiqV8YPgI/jyEb9JERBpFmDwpZrhhlU3w8nf4PXRCFdx/bJ/cqua5s?=
 =?us-ascii?Q?dNmo/xnqbL8ZNyOGoDJsKe+4dfxTjoDVW58kvkvH1PtZ70ikSFHPEe/tfGCz?=
 =?us-ascii?Q?N+mirMqlDRZIRZCvgOC1h6LuFyoMHsL8a0zs3GHwR/2lDQhIybpiLXuxc+8s?=
 =?us-ascii?Q?oUTMATe2AY5H48nfj8JdI6Ccn15Wr9nDKDJQSuJw5d5yxx7K1rkCQ9DHfjvm?=
 =?us-ascii?Q?eiWK6DxHlcjB5je98bHS6Tf9SzkVe6vTbY58qCRzXdke6XaOY/DEtmvw0e3+?=
 =?us-ascii?Q?npc8vWDp17m/KYxaE93aV70bHGvsdkOF1D4qk6ueM2tvtcGUCsiVUYnwdw8S?=
 =?us-ascii?Q?Z9QTqPRF4dNt7hh3lSgmOh0tc3WKUHsSvVgGfnLKbj/IC0h6hTzlGdpWz0YJ?=
 =?us-ascii?Q?GgeGBJJqw3FqAmsOrtFqj+GHjSFZMCRKv9iyIbXd4lL43S3hEdQY88WZrrHl?=
 =?us-ascii?Q?6+A/UrVEDI//TWmeRIcV5+5zg1MNojwuReMXU7Y1VBp6IYj9LT2QFMsmuaJ5?=
 =?us-ascii?Q?fyJWrUkd/lRHclEAw5i7H5VPn2iqdvhzJREwomUxc2CpP/oK/CuOkI1SCmaL?=
 =?us-ascii?Q?xpuCuAm4uRVo8fObf52iXaUXRYgtIeT3urX4?=
MIME-Version: 1.0
X-OriginatorOrg: us.af.mil
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN9P111MB2434.NAMP111.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 4a6d1db1-265b-486e-35ed-08de59d66605
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jan 2026 16:50:50.2020 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 8331b18d-2d87-48ef-a35f-ac8818ebf9b4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PHZP111MB2683
X-Content-Filtered-By: Mailman/MimeDel 2.1.30
X-BeenThere: cygwin@cygwin.com
X-Mailman-Version: 2.1.30
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-request@cygwin.com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request@cygwin.com?subject=subscribe>
From: "FOPPE,
 JEFFREY B CIV USAF AFMC AFLCMC/WFRQ via Cygwin" <cygwin@cygwin.com>
Reply-To: "FOPPE,
 JEFFREY B CIV USAF AFMC AFLCMC/WFRQ" <jeffrey.foppe@us.af.mil>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie.com@cygwin.com>

CVE-2025-13151 points out a vulnerability in libtasn1 versions 4.20 and earlier.  The version provided through Cygwin is much earlier.  It doesn't look like this package has been updated since 2019 and is listed as Orphaned.  A lot of other packages seem to depend on it.  Does anyone know if a developer will look at updating this?


Jeff Foppe


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple