[Git][security-tracker-team/security-tracker][master] Remove notes from one rejected CVE

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ea9d9367 by Salvatore Bonaccorso at 2026-07-08T09:22:24+02:00
Remove notes from one rejected CVE

Rejected Reason: The Undertow web server enforces a default maximum HTTP
request entity size limit. Any request (including GET or HEAD)
containing a body that exceeds this configurable limit is safely dropped
by the server, preventing single-request Resource Exhaustion (Out of
Memory) Denial of Service attacks.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -69869,8 +69869,6 @@ CVE-2026-3509 (An unauthenticated remote attacker may be able to control the for
 	NOT-FOR-US: CODESYS
 CVE-2026-3260
 	REJECTED
-	- undertow <unfixed> (bug #1134949)
-	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2443010
 CVE-2026-3225 (The LearnPress \u2013 WordPress LMS Plugin plugin for WordPress is vul ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-3138 (The Product Filter for WooCommerce by WBW plugin for WordPress is vuln ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea9d936715e3d7242148d7d1dc4fadb997856980

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea9d936715e3d7242148d7d1dc4fadb997856980
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260708/8e212675/attachment.htm>