CVE-2025-13151 and Cygwin package libtasn1_6

[Marco Atzeri]

On 23/01/2026 12:02, marco atzeri wrote:
> 
> 
> On Fri, 23 Jan 2026, 10:22 Brian Inglis via Cygwin, wrote:
> 

>      > My understanding is that 4.21.0 is safe from this
>      >
>      > https://lists.gnu.org/archive/html/help-libtasn1/2026-01/
>     msg00001.html <https://lists.gnu.org/archive/html/help-
>     libtasn1/2026-01/msg00001.html>
>      >
>      > I am testing the package build on Scallywag
>      > https://cygwin.com/cgi-bin2/jobs.cgi <https://cygwin.com/cgi-
>     bin2/jobs.cgi>
>      >
>      > Locally it passed all tests.
> 
>     Could also do with an update to gnutls 3.8.11?
> 
> 
> I will look during weekend

Ops Brian,
gnutls is NOT orphan.

https://cygwin.com/packages/summary/gnutls-src.html

Takashi,
can you take care ?

Regadrs
Marco