Red Hat Security Advisory

RHSA-2026:49703

delve security, bug fix, and enhancement update

Released 2026-08-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) delve-1.26.1-1.el10_0

Fixes 4 records

TI-2026-26182 CVE-2026-33810 · GHSA-fv83-x2xw-2j55

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

MEDIUM 42

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00346 Published 2026-04-08 Partial fix · 1.26.2 CWE-295

TI-2026-26183 CVE-2026-33811 · GHSA-497x-jcxf-m478

Crash when handling long CNAME response in net

MEDIUM 40

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00875 Published 2026-05-07 Partial fix · 1.25.10, 1.26.3 CWE-415

TI-2026-21587 CVE-2026-27137 · GHSA-7hfw-r8qc-89v4

Incorrect enforcement of email constraints in crypto/x509

MEDIUM 40

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applie…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00661 Published 2026-03-06 Partial fix · 1.26.1 CWE-295

TI-2026-21595 CVE-2026-27145 · GHSA-4279-q6mj-392r

Inefficient candidate hostname parsing in crypto/x509

LOW 30

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00591 Published 2026-06-02 Partial fix · 1.25.11, 1.26.4