VDB
RHSA-2026:59834
RHSA-2026:59834
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:ce075bf6f863c43b24a5b0b32a2a0058d412a7d0109ba056671e6da48f07b240_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:0abf3d221a6c61ab46dbe0dc2ec9bb845e24250d4c9e714b962d05f2109db54d_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:41ce168aaa196f3759eb4d00fba7fb52d65d5acc719436f402635169fe658b7e_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:0258c590023d09fd369f75d27ca20cdd0f63051268756dbed4e5b1382a996846_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-contour-rhel8@sha256:8d106c4d8ccd6f32b13714328619f02f18fde4acb7121643baaa3b44fcf74dd1_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:fc703633ed68a521530226aac6a74274385e603e65288e3cbad293ba7e13d847_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:bc5f01e04efb9f375c2ed43eeb6c266dba7127aeb50f178f06e46069d5a53949_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:a9485870df51d68d85b482778e58a26259f01e57ee4deb5efefbbaf76486fa06_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-ansible-operator@sha256:bdf4e5777ea10f55962201c76ac8d641389ad4aa51311406a1b385244f3f9976_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-capacity@sha256:c1c8e942a62ba8f33428bbf34a1cada226363f33923b97065900bdaee9e3aa92_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-cni@sha256:6693c705aaee422b841d75a3946188201c43bb065a45f6b495e37f458af399d1_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:e1b773ff978e5b02d1b2fd8febd71817b17a37813b0aa649658674dcd646c550_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:aa641118a31fbe46b8266a1d7758c0c9ba8643a0693b3adc79855bcacbb960f9_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:3f2417db45d342dcef4d6c908b8ac8389ebe1ce40edcb751b5927707277b7855_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:4dfcc38ad71ea7cc09c26016989a54d3cd506ba159361eaaabcf0d027aa1af89_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:b5a92d8083e4dcfb5b35be87eb355b0237c111f2cd68ec6e7338a1e570a8abb5_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:fc6fc54ef17cb955f0684ff1883e39588b9969d583a525e84ffcf1b27f3e337d_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:d482dfb91232cc628253c647cbc19ef5d8f503ebb32294f6d2855c4db337dceb_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:69680910c75ce807ba6fe68b9bcb2abf1e80d81c8c5a4f1349af1c240706a007_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:5b2c5e38a67c63899bc3ca06c2fb3d8e869c911cb45e42578fdcd4c33f7fc322_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
…and 20 more
Timeline
- Sep 3, 2026 CVE Published
- Oct 9, 2026 CVE Updated
- Oct 9, 2026 Distribution Patch
- Oct 9, 2026 Distribution Patch
- Oct 9, 2026 Security Advisory
- Oct 9, 2026 Security Advisory
- Oct 9, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:59834 advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://access.redhat.com/security/cve/CVE-2026-32280 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59834.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111 issue
- https://www.cve.org/CVERecord?id=CVE-2025-68121 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 advisory
- https://go.dev/cl/737700 advisory
- https://go.dev/issue/77217 advisory
- https://groups.google.com/g/golang-announce/c/K09ubi9FQFk advisory
- https://pkg.go.dev/vuln/GO-2026-4337 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2456339 issue
- https://www.cve.org/CVERecord?id=CVE-2026-32280 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-32280 advisory
- https://go.dev/cl/758320 advisory
- https://go.dev/issue/78282 advisory
- https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU advisory
- https://pkg.go.dev/vuln/GO-2026-4947 advisory