Release date:
2026-10-23 11:01:08 UTC
Description:
- CVE-2026-56862: rebuild with newer golang 1.26.7-1.el9_8 so crypto/tls no
longer treats post-handshake handshake messages as state-advancing, bounding
unlimited KeyUpdate key derivation
- CVE-2026-33818: rebuild with newer golang 1.26.7-1.el9_8 which caps
encoding/asn1 decode nesting depth, preventing stack exhaustion from deeply
nested ASN.1 input
Updated packages:
-
delve-1.26.1-1.el9_8.tuxcare.els1.aarch64.rpm
sha:4fab8d887d93cfc323d117a138c612a711491c039b05fdcd7c1b268687a0114b
-
delve-1.26.1-1.el9_8.tuxcare.els1.x86_64.rpm
sha:f1e9fafacbc4b93c251e2e631a446ef0e0f146776d355db198c9f21cea317647
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
