Re: CVE-2025-13151 and Cygwin package libtasn1_6

ASSI via Cygwin <[email protected]>
Newsgroups gmane.os.cygwin
Message-ID <[email protected]>
Marco Atzeri via Cygwin writes:
> On 22/01/2026 17:50, FOPPE, JEFFREY B CIV USAF AFMC AFLCMC/WFRQ via
> Cygwin wrote:
>> CVE-2025-13151 points out a vulnerability in libtasn1 versions 4.20
>> and earlier.  The version provided through Cygwin is much earlier.
>> It doesn't look like this package has been updated since 2019 and is
>> listed as Orphaned.  A lot of other packages seem to depend on it.
>> Does anyone know if a developer will look at updating this?

> Looking on it

It looks like it'll be a few more days before the release is done
upstream.


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

Wavetables for the Waldorf Blofeld:
http://Synth.Stromeko.net/Downloads.html#BlofeldUserWavetables

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.