Red Hat Product Errata RHSA-2026:49703 - Security Advisory Issued: 2026-08-03 Updated: 2026-08-03 RHSA-2026:49703 - Security Advisory Overview Updated Packages Synopsis Important: delve security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for delve is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. With that in mind, Delve should stay out of your way as much as possible. Security Fix(es): net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145) Bug Fix(es) and Enhancement(s): Update Delve to 1.26 [rhel-10.0.z] (JIRA:RHEL-213072) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2467822 - CVE-2026-33811 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME BZ - 2484207 - CVE-2026-27145 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries CVEs CVE-2026-27145 CVE-2026-33811 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM delve-1.26.1-1.el10_0.src.rpm SHA-256: 540d6ef898dd108cf300d0d072a70080853a9f774ecf4ddde42e56fafba45272 x86_64 delve-1.26.1-1.el10_0.x86_64.rpm SHA-256: 9dd751e1ee515ccab012fcc8b1e4569e2fccdd823d520ba45e3b1ca4c86c055b delve-debuginfo-1.26.1-1.el10_0.x86_64.rpm SHA-256: 5163bda231674ca67a792aad499eea6639d21a6df637cc0efdbd0115dd73a486 delve-debugsource-1.26.1-1.el10_0.x86_64.rpm SHA-256: 0dce9aa821d18eeea4334a93f925e7bccb5b3397aac30f196ae4bdc74d2a8510 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM delve-1.26.1-1.el10_0.src.rpm SHA-256: 540d6ef898dd108cf300d0d072a70080853a9f774ecf4ddde42e56fafba45272 ppc64le delve-1.26.1-1.el10_0.ppc64le.rpm SHA-256: ec381fcbfda2797efd8be0d68967586d3d45be19b1ab17f87d20923eac0835f9 delve-debuginfo-1.26.1-1.el10_0.ppc64le.rpm SHA-256: 913da478e0a219dc3d185c65a83873e1634d241f2aa15d0dc52aca8ee6d68a7e delve-debugsource-1.26.1-1.el10_0.ppc64le.rpm SHA-256: 47c542c82f40fc3270e68fb20954d324d5b30ca3df7bbce11982f5e0d410b9cd Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM delve-1.26.1-1.el10_0.src.rpm SHA-256: 540d6ef898dd108cf300d0d072a70080853a9f774ecf4ddde42e56fafba45272 aarch64 delve-1.26.1-1.el10_0.aarch64.rpm SHA-256: 8bf7e460c97787bef020f07cdfd00a484db1961174672a1ab900b730fac74a69 delve-debuginfo-1.26.1-1.el10_0.aarch64.rpm SHA-256: 8c4f35e1ac126f5bfb477b66cbfc7b02816c20729e9ca50012834c00a74cd771 delve-debugsource-1.26.1-1.el10_0.aarch64.rpm SHA-256: a90902b62305a341b0dda3a7a6f67e0065efb8137b51afbbc4ce552540049682 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 SRPM delve-1.26.1-1.el10_0.src.rpm SHA-256: 540d6ef898dd108cf300d0d072a70080853a9f774ecf4ddde42e56fafba45272 aarch64 delve-1.26.1-1.el10_0.aarch64.rpm SHA-256: 8bf7e460c97787bef020f07cdfd00a484db1961174672a1ab900b730fac74a69 delve-debuginfo-1.26.1-1.el10_0.aarch64.rpm SHA-256: 8c4f35e1ac126f5bfb477b66cbfc7b02816c20729e9ca50012834c00a74cd771 delve-debugsource-1.26.1-1.el10_0.aarch64.rpm SHA-256: a90902b62305a341b0dda3a7a6f67e0065efb8137b51afbbc4ce552540049682 Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 SRPM delve-1.26.1-1.el10_0.src.rpm SHA-256: 540d6ef898dd108cf300d0d072a70080853a9f774ecf4ddde42e56fafba45272 ppc64le delve-1.26.1-1.el10_0.ppc64le.rpm SHA-256: ec381fcbfda2797efd8be0d68967586d3d45be19b1ab17f87d20923eac0835f9 delve-debuginfo-1.26.1-1.el10_0.ppc64le.rpm SHA-256: 913da478e0a219dc3d185c65a83873e1634d241f2aa15d0dc52aca8ee6d68a7e delve-debugsource-1.26.1-1.el10_0.ppc64le.rpm SHA-256: 47c542c82f40fc3270e68fb20954d324d5b30ca3df7bbce11982f5e0d410b9cd Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 SRPM delve-1.26.1-1.el10_0.src.rpm SHA-256: 540d6ef898dd108cf300d0d072a70080853a9f774ecf4ddde42e56fafba45272 x86_64 delve-1.26.1-1.el10_0.x86_64.rpm SHA-256: 9dd751e1ee515ccab012fcc8b1e4569e2fccdd823d520ba45e3b1ca4c86c055b delve-debuginfo-1.26.1-1.el10_0.x86_64.rpm SHA-256: 5163bda231674ca67a792aad499eea6639d21a6df637cc0efdbd0115dd73a486 delve-debugsource-1.26.1-1.el10_0.x86_64.rpm SHA-256: 0dce9aa821d18eeea4334a93f925e7bccb5b3397aac30f196ae4bdc74d2a8510 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .