VDB
RHSA-2026:54603
RHSA-2026:54603
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:ddd1a6474300278dac787d5e4e3c3d039bb2da4ccece1d004c96527e1dde666d_ppc64le as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:1e833e41cf59c0c0c885425601176979a9ec8d6f4f16fc569780c3d7a997f7d6_amd64 as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:f3a784783b003c4247b9e2e9a959d51145ca7f917e5b454153382eb4a522dbdf_s390x as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:c5108ff11b287ae4086087d6ba6c8b11d09449b2f4336abb1e06e747b2b2a8fa_s390x as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:fd8c54407b8478fa1e52b0799bdf1afe5196a3b764a77a75bc9e2bc0cbb87ba6_arm64 as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:ce39d231547f9c253380161ad6e6d6b3457769e0d742f97659dfa0b1bc9f2636_s390x as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:d351e98aa13701e502603fe3799c17dc783150b3d6c7bfe0383d9aed27551b25_s390x as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:9c975bd1abe9f7598657186c6db4ed4a128ddf502dfd75fbc9d7f26bbacc87f4_arm64 as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:68e2c6dc33d52ef407e05ee066bb7c15f8f9e377055ef51385af7a7734a7abf2_s390x as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9@sha256:fc3e651b4c9c093336ca93ec00ca5a6f3a03b2af2a6eb7216fc903d81f5282bc_arm64 as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:daba53e3a576b7365447692cae962560438118fa3aa0be2a7b0a527796622536_ppc64le as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:fc50032674c26629911b965c4e2f8ecfaa6b73c6d885027194a98de47187ecbd_amd64 as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:08fd91836d1242e7a3849ca730debeeb28669dc6411b3921fd59b30027e41e7f_arm64 as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:96db355f55edb4922111aa366714d3b1b9ed9382dea08091a2086a54d9349526_arm64 as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:2c0ddf2bcb5689c23e756d0730ef35386c8c39601432bfd6236b014c643c380d_s390x as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-dpu-intel-ipu-vsp-rhel9@sha256:b534cafb65f0603476d0b7c03184977a0eadc7e8691d8fcec6d985d3242d043c_amd64 as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:97d7b74ef6bc67aee7fda10dcae3867dcf6f21c248a4c58eefce9a1ae717d925_arm64 as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:9c77e412e9563461f16795528334fd2d26648e655e8f5c0c63f6985bd9a181be_ppc64le as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:df7e0be9e898b13dd19b3f67d0a82797b08cbd31719cbdc1d3557891314a3f7f_s390x as a component of Red Hat OpenShift Container Platform 4.21 | * |
| Red Hat | registry.redhat.io/openshift4/ptp-must-gather-rhel9@sha256:0707880e4dc0845114c5f44ccb3a4e3053759f7e020a923706d1e97b02acbb7c_ppc64le as a component of Red Hat OpenShift Container Platform 4.21 | * |
…and 170 more
Timeline
- Aug 18, 2026 CVE Published
- Sep 12, 2026 CVE Updated
- Sep 12, 2026 Distribution Patch
- Sep 12, 2026 Distribution Patch
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:54603 advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://access.redhat.com/security/cve/CVE-2026-27145 advisory
- https://access.redhat.com/security/cve/CVE-2026-32280 advisory
- https://access.redhat.com/security/cve/CVE-2026-33811 advisory
- https://access.redhat.com/security/cve/CVE-2026-46597 advisory
- https://access.redhat.com/security/cve/CVE-2026-59869 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54603.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111 issue
- https://www.cve.org/CVERecord?id=CVE-2025-68121 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 advisory
- https://go.dev/cl/737700 advisory
- https://go.dev/issue/77217 advisory
- https://groups.google.com/g/golang-announce/c/K09ubi9FQFk advisory
- https://pkg.go.dev/vuln/GO-2026-4337 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2484207 issue
- https://www.cve.org/CVERecord?id=CVE-2026-27145 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-27145 advisory
- https://go.dev/cl/783621 advisory
…and 32 more