VDB
RHSA-2026:59833
RHSA-2026:59833
PUBLISHED
CVSS 7 HIGH
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
Risk Scores
CVSS 3.1
7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-docker-registry@sha256:2a944919dcacfd9f8bcd6e2ff8653f602ae3de6264a46b51750dabe17ae9e267_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus@sha256:f589b3378137b9ddac7caf4bd9f5c4267e80d22f4510895e9feeb69c981cc465_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-kuryr-controller-rhel8@sha256:8c5f04f65f249a604b1f01725c6dc28f3a6a42c91c63c7d70a6a0771a7cef0dd_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-authentication-operator@sha256:0ae23c313064fd4f2746272ef8ca52ff832051cd29b52d7555a8a1b992e33b19_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8@sha256:74433130f20ba2ae437010e1c7ee180bd538a7f94bbd9c4e74594f97c41915e6_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:3c601dcd2409d1a066fa3eb780464da1ed4a778ffab694602b0679a411d66690_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-installer@sha256:c6d6bc61fb515c0e70baa70e5ee1ea58236ff1f0009ef8d159418605e20bc015_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:419b34b8934454438ca12fe18844f144e8d9671a86ba9a076d3569d2917d7f09_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-snapshotter@sha256:48b4347ae93e7ed5d8a72b2da936c6c5e5639298cf677ced89c5c2ba39c40428_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:21fcfa5f8116fe83aae757f5a7f89065fa2fb0b5f6f434afdb4319e30806bebc_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-networkpolicy-rhel8@sha256:54d32c174a45503d4d99cafd6776ff8e6a85ddf27769724afe84540b50b44442_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-bootstrap@sha256:83204753c5fdd0aca0310a71e04402b7f7b5721adb6e11d413f8d99cc2e5dd97_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-apiserver-operator@sha256:931a2f1913179046d3717d4402953eeff1839d772386b08bf4483cce251577d5_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel8@sha256:7dc368342a1f019716340c9a7ce5a72330b0f03a3e0bfb874787cf33b8b9ec2e_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-operator-marketplace@sha256:be031c3f354dca7e811b472617156bf3f501a89c7c5a3d5efb4ed617c48e4ddc_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-os-images-rhel8@sha256:9035e05d9ccbff83df878749ee7bc73705653eaafabb3b2d3de5e719e92c9102_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-service-ca-operator@sha256:46af35ae7e113db34177da143d03b568133dfe79b4da84059d04612a424b3d15_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel8@sha256:873bca360fa6f0ee34949c134487c456cf0445eaf09e57d7f2cdbb97b0c69ca9_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-openshift-state-metrics-rhel8@sha256:5c1c7e54b316bcc37b873828bd9a1963b7061699e96ef3e5a8ac14619de6c0b1_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-olm-rukpak-rhel8@sha256:6246e533413df422ed73dcd287dd821f8f1005958c21bad2ab4e5c625fa4a339_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
…and 171 more
Timeline
- Sep 3, 2026 CVE Published
- Oct 14, 2026 CVE Updated
- Oct 14, 2026 Distribution Patch
- Oct 14, 2026 Distribution Patch
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
- Oct 14, 2026 Security Advisory
References
- https://github.com/advisories/GHSA-35jh-r3h4-6jhm advisory
- https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c advisory
- https://access.redhat.com/errata/RHSA-2026:59833 advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://access.redhat.com/security/cve/CVE-2026-27143 advisory
- https://access.redhat.com/security/cve/CVE-2026-27144 advisory
- https://access.redhat.com/security/cve/CVE-2026-32280 advisory
- https://access.redhat.com/security/cve/CVE-2026-33186 advisory
- https://access.redhat.com/security/cve/CVE-2026-33814 advisory
- https://access.redhat.com/security/cve/CVE-2026-39820 advisory
- https://access.redhat.com/security/cve/CVE-2026-42154 advisory
- https://access.redhat.com/security/cve/CVE-2026-42499 advisory
- https://access.redhat.com/security/cve/CVE-2026-44492 advisory
- https://access.redhat.com/security/cve/CVE-2026-44495 advisory
- https://access.redhat.com/security/cve/CVE-2026-44496 advisory
- https://access.redhat.com/security/cve/CVE-2026-4800 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59833.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111 issue
- https://www.cve.org/CVERecord?id=CVE-2025-68121 advisory
…and 73 more