CVE-2025-13151 and Cygwin package libtasn1_6
"FOPPE, JEFFREY B CIV USAF AFMC AFLCMC/WFRQ via Cygwin" <[email protected]>
| Newsgroups | gmane.os.cygwin |
|---|---|
| Message-ID | <BN9P111MB2434F33C607CDE0AB042906EB097A@BN9P111MB2434.NAMP111.PROD.OUTLOOK.COM> |
CVE-2025-13151 points out a vulnerability in libtasn1 versions 4.20 and earlier. The version provided through Cygwin is much earlier. It doesn't look like this package has been updated since 2019 and is listed as Orphaned. A lot of other packages seem to depend on it. Does anyone know if a developer will look at updating this? Jeff Foppe -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation: https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple