NEWS: change CVE-2026-3833 severity to Moderate...

... as discussed in #1803

Signed-off-by: Alexander Sosedkin <asosedkin@redhat.com>

diff --git a/NEWS b/NEWS
index 8df7f835af143f7a5295e6c8d1a8925410ca125a..b467e3f390d19d1ab948b2476204f8969ffbdb6f 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -53,7 +53,7 @@ See the end for copying conditions.
    now perform case-insensitive comparison.
    Independently reported by Oleh Konko (1seal) and
    Joshua Rogers of AISLE Research Team.
-   [GNUTLS-SA-2026-04-29-5, CVSS: high] [CVE-2026-3833]
+   [GNUTLS-SA-2026-04-29-5, CVSS: medium] [CVE-2026-3833]
 
 ** libgnutls: Fix intersecting empty constraints
    Permitted name constraints were wrongfully ignored