Red Hat Security AdvisoryRHSA-2026:23103
delve security update
Released 2026-06-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) delve-1.25.2-4.el10_0
Fixes 3 records
Priority MEDIUM 40
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00632 · Published 2026-04-08 · Partial fix · 1.25.9, 1.26.2 CWE-770
Priority MEDIUM 40
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00626 · Published 2026-04-08 · Partial fix · 1.25.9, 1.26.2 CWE-770
Priority LOW 39
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00361 · Published 2026-04-08 · Partial fix · 1.25.9, 1.26.2 CWE-295
