VDB
RHSA-2026:56913
RHSA-2026:56913
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:38be83e5c74a4471e485ff227624bb00b11c6bf8375000687d371053d844c7ef_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:30fb3c0ee77d2d69db946984b04e2cb821f13aebaf77923cef3782a35af0e0fe_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:d455290770c70b58a2cdafb94625671d17b9f9b649e180bc7590a3e4d40fab52_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:53f3bec5bb2eabe6e4476bbead7e33c2c5b4c24cfb6f8ec39e864badd57fead2_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-egress-router@sha256:f947b85d15e5abe61beeae985b0be2f1725ed64495b616d99c3745f931e30bbc_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:9a3d6a9eb1b6af585b5e7e68eac24d2300a189667a08a58f4fc1888a75397ba9_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:2646e4e64b00326bd5c5cba7b0a5fc3b712fdbd11edb905135de2756a7b9156f_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/metallb-rhel9@sha256:5a01ef91774196c974b2dd38c66498f2afe8456b276d86609d4c81b9140ee869_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:483077accce624e8dc67c8669086db42d7122ddd52393a3da0bd1229f5f15e2b_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-baremetal-cluster-api-controllers-rhel9@sha256:650c881859d4e5bbb9bb725097041a74c90c3eaae70695546210192cf40f0e75_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel8-operator@sha256:438a63c53dee3728583bc8bd2de9730f9e3675821a7f752c41201a74afb1abcd_s390x as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:bba5c547e8a6a7542e5f5cb3df4130308762765de5847119d88ff6d1976b2c50_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:ae5dbaad853be558ce28442b010c0219ddf03fcccbff36c921052d24041c13f6_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:b4b9b04306a949f5b022a3984960744b869c38f5c66b5aad88cd93bfbae31c21_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:89a58288e60a11f597597656bc4ae5cc6344315778d52a2c52f3dca06e4f73f8_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:e13f1b5884f48e4ae06d39212d526868dcc260c88c0210462e42284af9aaf842_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-capacity@sha256:15f4176ce69b512548e6b0090cef791399af6a68532dd2915c933681a8e4c5d7_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:a4afadd649d39561eaa02a8aef99d535f9f22453e39f984490f25268ca6bb577_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:1b1af776f4d94765cefca3e5a0337acaf450974e51110f1b8aba3ccf4f2ee677_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | registry.redhat.io/openshift4/nmstate-console-plugin-rhel8@sha256:ea1688f8653f515536ecf2cbc79e45c2b331a838993b64d4a103d90056855b83_s390x as a component of Red Hat OpenShift Container Platform 4.15 | * |
…and 139 more
Timeline
- Aug 26, 2026 CVE Published
- Sep 12, 2026 CVE Updated
- Sep 12, 2026 Distribution Patch
- Sep 12, 2026 Distribution Patch
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:56913 advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://access.redhat.com/security/cve/CVE-2026-32280 advisory
- https://access.redhat.com/security/cve/CVE-2026-33811 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56913.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111 issue
- https://www.cve.org/CVERecord?id=CVE-2025-68121 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 advisory
- https://go.dev/cl/737700 advisory
- https://go.dev/issue/77217 advisory
- https://groups.google.com/g/golang-announce/c/K09ubi9FQFk advisory
- https://pkg.go.dev/vuln/GO-2026-4337 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2456339 issue
- https://www.cve.org/CVERecord?id=CVE-2026-32280 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-32280 advisory
- https://go.dev/cl/758320 advisory
- https://go.dev/issue/78282 advisory
- https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU advisory
- https://pkg.go.dev/vuln/GO-2026-4947 advisory
…and 7 more