No CVE. From the ChangeLog: “Security bugfixes: Fixed requesting client certificate when specified as a global option.” * gnu/packages/web.scm (stunnel): Update to 5.48.