VDB
RHSA-2026:65841
RHSA-2026:65841
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
…and 18 more
Timeline
- Sep 17, 2026 CVE Published
- Sep 26, 2026 CVE Updated
- Sep 26, 2026 Distribution Patch
- Sep 26, 2026 Distribution Patch
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:65841 advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://access.redhat.com/security/cve/CVE-2026-32280 advisory
- https://access.redhat.com/security/cve/CVE-2026-33814 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65841.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111 issue
- https://www.cve.org/CVERecord?id=CVE-2025-68121 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 advisory
- https://go.dev/cl/737700 advisory
- https://go.dev/issue/77217 advisory
- https://groups.google.com/g/golang-announce/c/K09ubi9FQFk advisory
- https://pkg.go.dev/vuln/GO-2026-4337 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2456339 issue
- https://www.cve.org/CVERecord?id=CVE-2026-32280 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-32280 advisory
- https://go.dev/cl/758320 advisory
- https://go.dev/issue/78282 advisory
- https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU advisory
- https://pkg.go.dev/vuln/GO-2026-4947 advisory
…and 8 more