[Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2026-95209

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Nov 4 07:20:17 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4bc4838e by Salvatore Bonaccorso at 2026-11-04T08:19:30+01:00
Remove notes from CVE-2026-95209

The CNA confirmed the rejection as "This candidate was withdrawn by its
CNA. Further investigation showed that it was not a security issue."

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -39945,9 +39945,6 @@ CVE-2026-95210 (GnuTLS v3.8.13 does not reject a critical keyUsage extension whe
 	NOTE: Not considered security issues by GNU TLS upstream within the GNU TLS security policy
 CVE-2026-95209
 	REJECTED
-	- gnutls28 <unfixed> (bug #1150522; unimportant)
-	NOTE: https://github.com/lkloliver/poc/tree/main/CVE-2026-95209
-	NOTE: Not considered security issues by GNU TLS upstream within the GNU TLS security policy
 CVE-2026-95208 (An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c ...)
 	- wolfssl <unfixed>
 	[trixie] - wolfssl <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4bc4838e6bbad0e9a1e605427c89f5a00fd85e1d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4bc4838e6bbad0e9a1e605427c89f5a00fd85e1d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/02c4405d/attachment.htm>


More information about the debian-security-tracker-commits mailing list