This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-95210 →
DEBIAN-CVE-2026-95210
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.
Original description
The description as published by the source.
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
gnutls28
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
gnutls28
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
gnutls28
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
References
- advisory security-tracker.debian.org