VDB
RHSA-2026:56912
RHSA-2026:56912
PUBLISHED
CVSS 7.400000095367432 HIGH
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
Risk Scores
CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-installer-artifacts@sha256:25eff4ecd6f6b4e42e593819ca793f6868dec118b06e9544411d6b8ab5f141ff_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-api-provider-aws-rhel9@sha256:3a1b2f216bf24756e1a5ce1d61bd9ea0225d467905d9219a40504924fa0e3031_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:78dd5c7988c55f9d6909ca63d3a026d314b7c7375cae90e2236043f9f79e68db_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:f0ffd6579089a30031e720d830b234478a5a6ea2a10650aa4c3fc95f5b714ea4_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:ec7cbf68d54a193086a2fcb34057ed7eac040a454eb65f8127ecbc002faa1bc0_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9-operator@sha256:dd05d0f374bfb33b6ffbb3d2b61f7fa099976922a9d15eed9fda95f2d48c6ff5_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-os-images-rhel8@sha256:720a45d672e17f00686342672972ec2b939fe16221b0a67aa856e8acfc60826f_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6aaa8fb9692ce7216fb1ed6990837402e1e12a27f11d71841afb2b751727b32b_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel9@sha256:c1b918f8b1650782262d067e17d1f528c4f9518f158a89f68a537941e03b2528_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-kube-proxy-rhel9@sha256:6306f423857ab93d64c930fdf84c5ee90280b741b2fd49720e8a8504bccf62d3_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cloud-credential-operator@sha256:d4fe7cc51ab7fa3db44c18dd856a3b77f06b3c26bfefd7093e024250a4c34750_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-operator-marketplace-rhel9@sha256:b54d9d04f3ede2ba68a56ac9c52b83efd20884bf66f185ab1019a8d81eb6f03d_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-console-rhel9-operator@sha256:7bcf34547a9b635b1ef630de1d3acf401ac1f8f9c335405ba1eb53adfe2bf0be_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-deployer@sha256:5fcebedd40ce0519adddab38ca5fe0f7c308a07d4fbdd239f062f211fbedd020_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator@sha256:5d2fdf20737c795e4135f44aa264e0b5f61de62a7f97410745f1eb86cb693fa7_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:24d0ef0bd22114f8402e58d52eb37ddcf484aac746d1858e6e38551c3ea602f6_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-must-gather@sha256:9e2703c6a642696514669ec20ac4d92a9fadde1eeb2d5da8de2fe8f458a21d51_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-scheduler-rhel9-operator@sha256:3d29952f8e5f9c9b507080faef0f3a734dadc4fe91ffb39f2e6dd6afc413ec27_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel9@sha256:92c6584a090f7270ea2ccbdc6c25743b3ccb35bb6b570785f3ae01ca13027403_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-cluster-api-controllers-rhel9@sha256:51fc684b4befc0f222e88ee15d48d259c344473d4a5af05eac2d54bc7b1ab23e_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
…and 644 more
Timeline
- Aug 26, 2026 CVE Published
- Oct 14, 2026 CVE Updated
- Oct 14, 2026 Distribution Patch
- Oct 14, 2026 Distribution Patch
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
References
- https://github.com/advisories/GHSA-35jh-r3h4-6jhm advisory
- https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c advisory
- https://access.redhat.com/errata/RHSA-2026:56912 advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://access.redhat.com/security/cve/CVE-2026-16242 advisory
- https://access.redhat.com/security/cve/CVE-2026-26996 advisory
- https://access.redhat.com/security/cve/CVE-2026-32280 advisory
- https://access.redhat.com/security/cve/CVE-2026-33186 advisory
- https://access.redhat.com/security/cve/CVE-2026-33811 advisory
- https://access.redhat.com/security/cve/CVE-2026-33814 advisory
- https://access.redhat.com/security/cve/CVE-2026-42154 advisory
- https://access.redhat.com/security/cve/CVE-2026-42499 advisory
- https://access.redhat.com/security/cve/CVE-2026-4800 advisory
- https://access.redhat.com/security/cve/CVE-2026-49332 advisory
- https://access.redhat.com/security/cve/CVE-2026-50236 advisory
- https://access.redhat.com/security/cve/CVE-2026-50237 advisory
- https://access.redhat.com/security/cve/CVE-2026-9277 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56912.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111 issue
…and 75 more