VDB
RHSA-2026:56789
RHSA-2026:56789
PUBLISHED
CVSS 7.400000095367432 HIGH
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
Risk Scores
CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-openshift-controller-manager-rhel8@sha256:66124f8fec915e3f499106353508aed8e20ff338d86c4078b481c08965ddb68b_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:ac9e04a38ac0a4e27ba779c6a34de52a100d9cecc82ba4095d45688319a6677e_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-operator-registry@sha256:81e1c9e7cfab332c5f6892e292bf91059bff8818bcd4c55569170e7f3eb4bade_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-scheduler-operator@sha256:c48fa65c1efea1757bbd5832ee0055ce38a1fe0a4e321650272eb8d8253f0bac_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | OpenShift Container Platform 4.14 | |
| Red Hat | registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:a98340046d15a04bfb79d8dfc217fddf83cf84ff44976f730e88d9199a7950b1_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-os-images-rhel8@sha256:b50c91e0362156809c870f0c48f2ae89987f5d6a4d6e76ebf739cc843051ca0a_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel8@sha256:a2582c482d2421f465a5db0ce9677ef7c9e3bef1fe0f1ccb0980016a6fb0b45b_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/network-tools-rhel8@sha256:585318096ffbfe34e6a4732f213c96134174ee434cd1ad07cab8ed1115e4c801_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:a311484ce05b386483cb1ee4f15e3674e5537d65b538648d37d1e7b6cc053d74_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus@sha256:38df4f74818273aaf9fdfad395b95583289202bb6edb17ec1762a728cceadd18_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-hypershift-rhel8@sha256:e4cbb23785732ce2a2f0bca8d90b1ee3e3465a4cc5c5d95fe2d51f1d4227ca02_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-api-provider-openstack-rhel8@sha256:87f07b67099433ecc8502e5a3e0d83d3a06bacfee1cd130467498d8d5aa5f5f9_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-livenessprobe@sha256:da86a57a6986177b0719c68c258ef3a7dd0a4d5f4718740ff230fe248fcf1d34_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-telemeter@sha256:0b9641da5161d009703d59efda39b96ace7bbd7f001df75bbf14b66fa8c30ed0_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-control-plane-machine-set-operator-rhel8@sha256:cf1c69780f358a55384d91797ebfc88cf63935a7870d0844a325b8564ba923ac_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-apiserver-operator@sha256:7acf322431dd835c94bbf7f11cac07136605c24befa9c8466d98b56286a99f75_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel8@sha256:d4df66fb204655bf1aefe3312c0a95adf1aa58635db4b78558c2e21e85d8bf04_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:9b028f914b89f698afa6e8b0fc452180949ea0bb79c317692fab8ad5da7fdcef_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-pd-csi-driver-rhel8@sha256:cb60daab883e1ff363ddc1727f2b7395b2f9c3365ea3321dda0a5a948beb9951_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
…and 656 more
Timeline
- Aug 26, 2026 CVE Published
- Oct 14, 2026 CVE Updated
- Oct 14, 2026 Distribution Patch
- Oct 14, 2026 Distribution Patch
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
References
- https://github.com/advisories/GHSA-35jh-r3h4-6jhm advisory
- https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c advisory
- https://access.redhat.com/errata/RHSA-2026:56789 advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://access.redhat.com/security/cve/CVE-2026-16242 advisory
- https://access.redhat.com/security/cve/CVE-2026-26996 advisory
- https://access.redhat.com/security/cve/CVE-2026-32280 advisory
- https://access.redhat.com/security/cve/CVE-2026-33186 advisory
- https://access.redhat.com/security/cve/CVE-2026-33811 advisory
- https://access.redhat.com/security/cve/CVE-2026-39820 advisory
- https://access.redhat.com/security/cve/CVE-2026-42154 advisory
- https://access.redhat.com/security/cve/CVE-2026-42499 advisory
- https://access.redhat.com/security/cve/CVE-2026-44496 advisory
- https://access.redhat.com/security/cve/CVE-2026-4800 advisory
- https://access.redhat.com/security/cve/CVE-2026-50236 advisory
- https://access.redhat.com/security/cve/CVE-2026-50237 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56789.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111 issue
- https://www.cve.org/CVERecord?id=CVE-2025-68121 advisory
…and 67 more