cygstart: buffer overflow when a URI is passed (cygutils-1.4.17-[23])

[Jeremy Drake]

On Wed, 23 Apr 2025, Mark Geisert via Cygwin wrote:

> A new version 1.4.17-4 of the cygutils packages with a corrected
> 'cygstart' is now making its way to the mirrors.

Can I ask why patches are made in the packaging rather than applied to
the cygwin-apps/cygutils git repository, given that this package is
"local" to Cygwin and therefore has no other "upstream"?  How would you
decide to make a 1.4.17-4 rather than a 1.4.18-1?

> Thanks all,
>
> ..mark
>
>