CVE-2025-68121 The advisory has been revoked - it doesn't affect any version of package yggdrasil (opens in a new tab)

Threat Intelligence

0.77% (51^st percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-ALMALINUX10-YGGDRASIL-15758346
published23 Mar 2026
disclosed19 May 2026

Report a new vulnerability Found a mistake?

Introduced: 23 Mar 2026

CVE-2025-68121 (opens in a new tab)

Amendment

The AlmaLinux security team deemed this advisory irrelevant for AlmaLinux:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream yggdrasil package and not the yggdrasil package as distributed by AlmaLinux.

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.