Red Hat Security Advisory

RHSA-2026:57409

OpenShift Container Platform 4.19.44 security and extras update

Released 2026-08-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-ansible-rhel9-operator

Fixes 3 records

TI-2025-41709 CVE-2025-68121 · GHSA-h355-32pf-p2xm

Unexpected session resumption in crypto/tls

MEDIUM 51

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00902 Published 2026-02-05 Partial fix · 1.24.13, 1.25.7 +1 CWE-295

TI-2026-24812 CVE-2026-32283 · GHSA-jrg3-gfjw-hm96

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

MEDIUM 40

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00632 Published 2026-04-08 Partial fix · 1.25.9, 1.26.2 CWE-770

TI-2026-24809 CVE-2026-32280 · GHSA-m4pr-4j3g-9v7v

Unexpected work during chain building in crypto/x509

MEDIUM 40

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00626 Published 2026-04-08 Partial fix · 1.25.9, 1.26.2 CWE-770