VDB
RHSA-2026:57488
RHSA-2026:57488
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:819374c3154a36de96ac8904cc0cc27e923c2f670511434743c28585048843f3_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:2580caeaaedb40eaf27441ef088fdf25c58cdf699fc33022cb2611c58b2a4727_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/pf-status-relay-rhel9-operator@sha256:1ca5f7b69fd6878679edfa30c64ede5444ed941b71f86985a86813175e5d95db_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:6ecdd7ff0b7c2711ad36f9f105d5f688889f0e21acdd0856105c482bc7ac365a_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-egress-router-rhel9@sha256:665e8174cc0f689281fd17beafa4a37ce7886a2df87dd9323b4b8de2e743b84c_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-egress-http-proxy-rhel9@sha256:9d16a1b4a9d0b22d95d0a65171d347fb38ef7f50ceda528466ea5e9218a0acb0_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:a65e5817fdcc2cf19b83a134a5bcee3c7f516ae24e65cc47eb6ca14b59498c60_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/metallb-rhel9@sha256:10d1e2bf156d30c71f1ecd59f04decc103ccd7aa00fecdea52d398e31f105f32_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:69c49a9ab1eeac42fa8e9a009df2cb6b63e644d9d83ac7b64a69198c48f591eb_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-node-driver-registrar-rhel9@sha256:bd93c9842f57852daae631bbef15dd90def2ceaf5e0110d83854e1778c5b87c6_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-provisioner-rhel9@sha256:796331bd2325c274729ca1524b6af695cdf2964e3744faf91e42440ad232a2f0_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:d3d20d1d0b4ff09a3d542f503f668ca6f69bd60837a06bb34de6b246d68b3110_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:d564c160ac2d77a0d984b9af7ee0bb0d8124614c58703fe4feb1d20d8c5b8460_s390x as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-egress-http-proxy-rhel9@sha256:f2b8d483f3ad4f56e6bece5092114372219914894aea026d7ef8f4eb33abeb8e_s390x as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-dpu-rhel9-operator@sha256:f8375d6f783383eeae1036c5f86a0d96fc0e7073840099bde37addd622b8e5b1_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-egress-router-rhel9@sha256:36e768d569deb2b397457fe346e84ca05db6a12877458228db40a4b52521c971_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:f2b060e9e70b836e22c1f6332cf0711d22784bad843ea1ccc08cd2e9e6a86e2f_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:b2ad69abee2ad02caaea7fc96cf058eb3c4c25428dfae1af2e2df664820b2604_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:d3d27907b9512a5228910624a2c3e4c4e2f80fe51a7e47339fb818a7d8713db3_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/metallb-rhel9@sha256:e3dc5a1bb83eab35c65ef94b37c57afc431a3ba41a77ed903f6a84793788a1ee_s390x as a component of Red Hat OpenShift Container Platform 4.18 | * |
…and 183 more
Timeline
- Aug 26, 2026 CVE Published
- Sep 12, 2026 CVE Updated
- Sep 12, 2026 Distribution Patch
- Sep 12, 2026 Distribution Patch
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
- Sep 12, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:57488 advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://access.redhat.com/security/cve/CVE-2026-27145 advisory
- https://access.redhat.com/security/cve/CVE-2026-32280 advisory
- https://access.redhat.com/security/cve/CVE-2026-33811 advisory
- https://access.redhat.com/security/cve/CVE-2026-42504 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57488.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111 issue
- https://www.cve.org/CVERecord?id=CVE-2025-68121 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 advisory
- https://go.dev/cl/737700 advisory
- https://go.dev/issue/77217 advisory
- https://groups.google.com/g/golang-announce/c/K09ubi9FQFk advisory
- https://pkg.go.dev/vuln/GO-2026-4337 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2484207 issue
- https://www.cve.org/CVERecord?id=CVE-2026-27145 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-27145 advisory
- https://go.dev/cl/783621 advisory
- https://go.dev/issue/79694 advisory
…and 22 more