Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHBA-2026:13572 - Bug Fix Advisory
Issued:
2026-05-04
Updated:
2026-05-04

RHBA-2026:13572 - Bug Fix Advisory

  • Overview
  • Updated Images

Synopsis

updated RHEL-8 based Middleware Containers container images

Type/Severity

Bug Fix Advisory

Topic

Updated RHEL-8 based Middleware Containers container images are now available

Description

The RHEL-8 based Middleware Containers container images have been updated to address the following security advisory: RHSA-2026:13285 (see References)

Users of RHEL-8 based Middleware Containers container images are advised to upgrade to these updated images, which contain backported patches to correct these security issues, fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images.

You can find images updated by this advisory in Red Hat Container Catalog (see References).

Solution

The RHEL-8 based Middleware Containers container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog (see References).

Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.

Affected Products

  • Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform 4.11 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform 4.10 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform for Power 4.10 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.10 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for ARM 64 4.10 aarch64

Fixes

  • BZ - 2451615 - CVE-2026-4878 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

CVEs

  • CVE-2025-9714
  • CVE-2026-4786
  • CVE-2026-4878
  • CVE-2026-6100

References

  • https://access.redhat.com/errata/RHSA-2026:13285
  • https://access.redhat.com/containers

aarch64

ubi8/openjdk-17@sha256:1ef117bb9fde95ee840840796fcca145adaf933df99393286c6ab4b1647eb944
ubi8/openjdk-17-runtime@sha256:5221550e090b43711f7b7592af51aa91398ae8849641b0926ca21687da29c109
ubi8/openjdk-21@sha256:1aeb63e9f40c93760d4467c700a4cfd280ccf5f552afb87ebe4c6d5bce94eeb2
ubi8/openjdk-21-runtime@sha256:ffe05017a04202aa10228463592b0082925aee8e0b0e9fecd6ff91a7ed6ad754
ubi8/openjdk-8@sha256:cb21c5eba24b5481e757d38e8b683fec3192a411cbbf93ea0c41e7b608b5d8db
ubi8/openjdk-8-runtime@sha256:e51eac3fe488971bd6f324a902a5af6efee6b6723184a18daa37fc528f3ddaf3

ppc64le

ubi8/openjdk-17@sha256:8b4301156780b5d7a6681465103cfce8cedd6b8ef0578a45aa204f169c5c47fc
ubi8/openjdk-17-runtime@sha256:886cdc9813b2a5110e47ba2463ee906d3246b24994564619f942b4a7bff6a557
ubi8/openjdk-21@sha256:4333e6788e111bbf5d37b40c41c002171851c83d4d567d52e80030552627b3c3
ubi8/openjdk-21-runtime@sha256:40f065e7573eddace57e114319ad4931468221f00c2070560556a3b63fa90f37
ubi8/openjdk-8@sha256:e46e7eb8afdb85ce07a4e4afe484c720fd26127fb4af017120f9ccf682712a28
ubi8/openjdk-8-runtime@sha256:7f8c974414aab85efcd704c17e13df878129a044fa1c5267eb1e8ef252ab1462

s390x

ubi8/openjdk-17@sha256:305f34c9fcd373836200523c03f102bf9ed24577469ec32cb28a19f882da29a6
ubi8/openjdk-17-runtime@sha256:e4941ef50807c9ffcb0f7944e10bebf00a3890cf26cdca58a3cccb4f81a718a0
ubi8/openjdk-21@sha256:34922717c01f13b4745f7b79110395f2aee3f1e3e9cd0d44ba5514feb52cbc66
ubi8/openjdk-21-runtime@sha256:19c2e8d99180c59ebada825920a365291c6e6eb5ee2ce80e3709e72c4830f23d
ubi8/openjdk-8@sha256:53ee08278740eff4f13a08d732745c9c9db88322a14e7a8673d0f39b6baa3942
ubi8/openjdk-8-runtime@sha256:572dce06fa1630effed41f496affd562f8b7541f5154c54f39d4b929a6568536

x86_64

ubi8/openjdk-17@sha256:fedb0b84a53129f08494850a7b56187f3e6bcd4a7830de568dfc63174ead9c80
ubi8/openjdk-17-runtime@sha256:afcb4b2ab317e980bff127ff13e046c2a485f3eaaee0e82896c66fdd5be54988
ubi8/openjdk-21@sha256:ae4ad2e9780eb3e5be312db9a9a7f852e09e76a81a21af187c418f712c7c1d8b
ubi8/openjdk-21-runtime@sha256:951db27bc9baee79fcf5bdc8e8dcef4a6c60f1f8e78a35b0538a79b8145719a0
ubi8/openjdk-8@sha256:298e535d0a85356a753db3e12eeeb53bd7c3c1cfe3dbceba06e2b56e32596fcc
ubi8/openjdk-8-runtime@sha256:69c9070d3a00b2af2eec67bf7655dfa8b5d0f9adb2845dcd16cf713a07ac3367

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility