VDB
RHSA-2026:57409
RHSA-2026:57409
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:bcf8e31ffad447d3641ecfa2ceecaa5dc061d7816cb1fa44cfa53cf14b4e5a9f_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-egress-http-proxy-rhel9@sha256:c00bb88420a767914d57d59e554c525ae3ea325551c56cff9784027d73163dfb_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-egress-http-proxy-rhel9@sha256:f212b9ca5c1fef64887e70131398df57bec2f3cf72534469520c65c82b7bfd6f_s390x as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:3a605b0004eb2b754501323b8421de9aa2e49a8b40fcab1e8467366d13cab944_s390x as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:8e32a60b1773976ac0c9e517ca75bf1a587c5d86cdb149622a88da6307ecb040_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:eaf2684b51ca0c76a9019a2b3220214c6b09aea4c87cc82089de2141165e0faa_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:4dd8e88b8057a4f8ab31bc368565adb7630ef75fbad2d809e056cd4d67cb290d_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:7537ff2461d31cd39654531f7bc0472b3cf8be745acdbf01044aea08ad605f6f_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:3422324ccb76c3dd3d05affac0a6ebcd4203317908b74f94fc0b6f5b4f9d21cd_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:c79b215e3e76938e471acf18512930faaf6e792be662ea052ab9f890159c79a7_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:5948a439ab7598dbf716517bf97e7fa7d035d2aefae749f68e0e9d9809e8bcc8_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:f7f2fd55eba383eb56ded59ef8d11cb8d461698e5b527d0c1591c2d2c6934722_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:1dcc13ace42d9f961402928357c88f7cd48a79ab59480a64c38b0851fecd673a_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-secrets-store-csi-driver-rhel9@sha256:53dfb423ed1ce03f3b4bf96bdf91be9bfee4311e8630be51aa9e1cade3d964c2_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:02ce1d91098b28723f9e6339dacd83924f4a7c3f7a7cc07c09b3afd07085621d_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:37fae50fc350956342aa6fc39a9e5cde26a9b87acd77e05f8d6e77e6ccac4421_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:6f9b6352e1e70b6d1cace9f86dddee8081aac54797269297e7b795afcadf25ca_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:49010bb1ceaae7a44e9b972f764fde2ddb787c51d32eb41ac5a084527e838d85_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:c49a1b8b9a2fcd03002c0d5c35d6c8e1912fe0db7f142c049bf9fbccb6c98a8a_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:d2c01c47ca5d8f6f2df40dca305599a2c86d85eeb8dfd74c1f77d8241b9a9577_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | * |
…and 165 more
Timeline
- Aug 26, 2026 CVE Published
- Sep 12, 2026 CVE Updated
- Sep 12, 2026 Distribution Patch
- Sep 12, 2026 Distribution Patch
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:57409 advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://access.redhat.com/security/cve/CVE-2026-32280 advisory
- https://access.redhat.com/security/cve/CVE-2026-32283 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57409.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111 issue
- https://www.cve.org/CVERecord?id=CVE-2025-68121 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 advisory
- https://go.dev/cl/737700 advisory
- https://go.dev/issue/77217 advisory
- https://groups.google.com/g/golang-announce/c/K09ubi9FQFk advisory
- https://pkg.go.dev/vuln/GO-2026-4337 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2456339 issue
- https://www.cve.org/CVERecord?id=CVE-2026-32280 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-32280 advisory
- https://go.dev/cl/758320 advisory
- https://go.dev/issue/78282 advisory
- https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU advisory
- https://pkg.go.dev/vuln/GO-2026-4947 advisory
…and 6 more