Delve is a Go language debugger that had multiple security vulnerabilities fixed in this update. CVE-2025-61726 involves memory exhaustion in net/url query parameter parsing, potentially leading to denial of service. CVE-2025-61729 is a denial of service caused by excessive resource consumption via crafted certificates in crypto/x509. CVE-2025-68121 concerns unexpected session resumption behavior in crypto/tls. These vulnerabilities are addressed in updated Delve packages for Red Hat Enterprise Linux 10 across multiple architectures. The Red Hat advisory RHSA-2026:3864 provides details and instructions for applying the update.

The vulnerabilities can cause denial of service conditions through resource exhaustion or unexpected session resumption behavior, potentially disrupting debugging or TLS operations. No known exploits in the wild have been reported. The impact is rated as Important by Red Hat, indicating a high severity level but not critical. The issues affect multiple architectures and versions of Red Hat Enterprise Linux 10.

Red Hat has released updated Delve packages that fix these vulnerabilities. Users should apply the security update RHSA-2026:3864 promptly to remediate the issues. Detailed instructions for applying the update are available at https://access.redhat.com/articles/11258. Since this is not a cloud service, remediation depends on applying the vendor-provided patches. No additional mitigation steps are indicated in the advisory.