Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHBA-2026:13502 - Bug Fix Advisory
Issued:
2026-05-04
Updated:
2026-05-04

RHBA-2026:13502 - Bug Fix Advisory

  • Overview
  • Updated Images

Synopsis

updated RHEL-9 based Middleware Containers container images

Type/Severity

Bug Fix Advisory

Topic

Updated RHEL-9 based Middleware Containers container images are now available

Description

The RHEL-9 based Middleware Containers container images have been updated to address the following security advisory: RHSA-2026:12441 (see References)

Users of RHEL-9 based Middleware Containers container images are advised to upgrade to these updated images, which contain backported patches to correct these security issues, fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images.

You can find images updated by this advisory in Red Hat Container Catalog (see References).

Solution

The RHEL-9 based Middleware Containers container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog (see References).

Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.

Affected Products

  • Red Hat JBoss Middleware 1 x86_64

Fixes

  • BZ - 2451615 - CVE-2026-4878 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

CVEs

  • CVE-2026-4878

References

  • https://access.redhat.com/errata/RHSA-2026:12441
  • https://access.redhat.com/containers

aarch64

openjdk-tech-preview/openjdk-21-jlink-rhel9@sha256:2e135fab61ddf28a4545540cb7a2b745984a619a55a640163403d83b38eb2e2f
ubi9/openjdk-17@sha256:b1fa1c8e8e93f757ef225787d1c7960511693f0913c8b64b895f2b85b67e5e96
ubi9/openjdk-17-runtime@sha256:fc651b2694ff0a0bdebcae297b414a77d0ad7c352bb500b4d730a21145283596
ubi9/openjdk-21@sha256:11d32ad197c3555a2219a0c18033f206591adec61e89973451793da46a957591
ubi9/openjdk-21-runtime@sha256:47d4b4ae2e1b811486c533f23ed93ee483845907f205cb653f8282949cb6457f
ubi9/openjdk-25@sha256:7ce367d6552f6dada670e11fb60027829d5070475dd5d26284b7e6cc3a7d514e
ubi9/openjdk-25-runtime@sha256:d6f6d1cb0a98759a9feae193be77e86d34697b575928758d88e52aa9a430f7b2

ppc64le

openjdk-tech-preview/openjdk-21-jlink-rhel9@sha256:78e0aa67b034c66a1c83d50ed10089a224114a08a31cbcabfd8e0d7624683dab
ubi9/openjdk-17@sha256:a57ffdafdec057f1ad647606f2d458d521c2df325e97c427dea93039a0f901c8
ubi9/openjdk-17-runtime@sha256:156be4617cbb89d52a044be3d8c351091f328d010b9af402df2cc97adf4de02c
ubi9/openjdk-21@sha256:a617161af51427661b20f164d1c204236f5044ed4716367ceb4b814a5a4ccd32
ubi9/openjdk-21-runtime@sha256:fdb458f83cd124d882e04f9050dd0288b0287842443949bdb020b22ffe5e1494
ubi9/openjdk-25@sha256:330255e3d0e07b48c6e14c06ea9aead13204707107b81a325a1009f4dc490c3f
ubi9/openjdk-25-runtime@sha256:16c3f45a5df3643accb9e2ac7b7cd5dad68d9a67b80c3cf631d6b30b6765c220

s390x

openjdk-tech-preview/openjdk-21-jlink-rhel9@sha256:7b60a5c516b2b318bce2ad6814d43f090704fc509c1a6f71adbd69138cbb3322
ubi9/openjdk-17@sha256:c97de824ce13976f2246a411e5f3d3b17ea6749f0b588604badc11446b69a6e3
ubi9/openjdk-17-runtime@sha256:65af65071221f1a0c3f7d5785faf301cc29ff3f6d3ad34268e9938a53942b9c3
ubi9/openjdk-21@sha256:3266f1e0b07a0a3c9451d840dcae2b92ceb0e32748bbac6f46a38d8d09431526
ubi9/openjdk-21-runtime@sha256:22491eba045a03490fcdae85c6edd6871b5ea5f76f98d25e20931f639d02741d
ubi9/openjdk-25@sha256:3825136a0ffa9d046ae2946065f72025deaaddd634bb2fc038bd5918c9bd7cd3
ubi9/openjdk-25-runtime@sha256:936b80eeaf17e6bf6d1b604a9ffe7efbc89e4a693f6f67b0934fa614fbed24ed

x86_64

openjdk-tech-preview/openjdk-21-jlink-rhel9@sha256:e56654106b6e33d59b64eff665ebd3d6c7c28e07e686c11116c13f5613d039a2
ubi9/openjdk-17@sha256:99f9981794a0fb7dcaa9ed7769b3be74777174f26bc5d51df47a2d6602c0ced2
ubi9/openjdk-17-runtime@sha256:4192be7c8a4be0e5b96fad69d01fa10adac4894abfa8c7ae02c6c287893becf4
ubi9/openjdk-21@sha256:2bb96bf0034ed62f317087cf64a05d48d0f250a66b1508b7e4053e2721a91106
ubi9/openjdk-21-runtime@sha256:06fccb40fcf6415c590b0dbb0874ccaa0d8f74a549f11e12d98ce9140b1f235c
ubi9/openjdk-25@sha256:ef56e329dddf63bf60677ddbea6b6098b52d49f6c7de8c5565ad5dacd6482f43
ubi9/openjdk-25-runtime@sha256:1c9d7ba23f9cdf35ed11baf56b1c98e7d7347843f49f3c00499280a3f0c0136e

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility