Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHBA-2026:66023 - Bug Fix Advisory
Issued:
2026-09-09
Updated:
2026-09-09

RHBA-2026:66023 - Bug Fix Advisory

  • Overview
  • Updated Images

Synopsis

updated RHEL-9 based Middleware Containers container images

Type/Severity

Bug Fix Advisory

Topic

Updated RHEL-9 based Middleware Containers container images are now available

Description

The RHEL-9 based Middleware Containers container images have been updated to address the following security advisory: RHSA-2026:64800 (see References)

Users of RHEL-9 based Middleware Containers container images are advised to upgrade to these updated images, which contain backported patches to correct these security issues, fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images.

You can find images updated by this advisory in Red Hat Container Catalog (see References).

Solution

The RHEL-9 based Middleware Containers container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog (see References).

Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.

Affected Products

  • Red Hat JBoss Middleware 1 x86_64

Fixes

  • BZ - 2501732 - CVE-2026-16118 xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

CVEs

  • CVE-2026-16118
  • CVE-2026-50219
  • CVE-2026-56132

References

  • https://access.redhat.com/errata/RHSA-2026:64800
  • https://access.redhat.com/containers

aarch64

ubi9/openjdk-17@sha256:dd459f72d4ff4720db30b3fc6809a770a4307383710b5405109b8a385a5a31d4
ubi9/openjdk-17-runtime@sha256:c765b5d7db8ae6cd56ff7999e30afd1595afb67e96125529455cb44c746fd3fc
ubi9/openjdk-21@sha256:655b2119f233c10aa1e4624f77508f81d2af2df27178fa4e0ce7b928db105f49
ubi9/openjdk-21-runtime@sha256:3ef5d9416ae7b107579caf08f6b2a3044aee44bf8fbfb975519496e4dbe9bd2f
ubi9/openjdk-25@sha256:f0b467f2cf08fca82f8ee1fafa43d65b9e734c278624daa5f29397fad7df4e5a
ubi9/openjdk-25-runtime@sha256:c69e93df5ec027d2624fd4403461d57c62f7fda6ff3f4300d1d4ebcc358a7c42

ppc64le

ubi9/openjdk-17@sha256:2625b019ef387d2e0573bc81c42d9e3217bc85661a5b3c91f67ea490cba811c8
ubi9/openjdk-17-runtime@sha256:4f4ea0269aad7603f6973bcaf9805cc7a9dc6402a4364a95fa59ef69785bcbfd
ubi9/openjdk-21@sha256:116c2e3f6f19fcf39e09a9c0efdcc936ba30334d47535646fe314e4c1fbd03c7
ubi9/openjdk-21-runtime@sha256:4a3630378ec8c0c1230ceed715b844329a04789c2cf19de03e448b658eb8d2db
ubi9/openjdk-25@sha256:86214a5e86340e798b637b4291a689da02a1541fb3384886f0f0dbe02c700da0
ubi9/openjdk-25-runtime@sha256:be997c4f35596dad3110d5c8fab304cbb6876f5965350f3a160dc8b82e896c77

s390x

ubi9/openjdk-17@sha256:611bf71dfec7860b9344bf48417bc9f18823efef5ffcda832997422bba126969
ubi9/openjdk-17-runtime@sha256:1f32dd11ef5c7e66f9abc07efe21a7f7e4f9f2727e230d81272d60daa37007eb
ubi9/openjdk-21@sha256:d2bca754ae47c0906dacee7770dd94005fa1188983cd4ef3049aba79843221a0
ubi9/openjdk-21-runtime@sha256:16bd7948fe23817ac9e052bf4d63e8d0fd0eb24727180949f0e2aaf048a99c30
ubi9/openjdk-25@sha256:1412f2873870341b81da0580282b38cb748b442d60f9215f88c7839e6544a8fb
ubi9/openjdk-25-runtime@sha256:91c1d9919300b240beeee58c36e9c9d9d50c4b133d72ec950f90d25db7eb9474

x86_64

ubi9/openjdk-17@sha256:6483b8748ba81bbf09f5e84708c814e7eeefbf69c32bace8cee452d634682dd7
ubi9/openjdk-17-runtime@sha256:4fc6569408e4e1f496a7fa3689d332814b2b2ced42573721300f8295b37442d1
ubi9/openjdk-21@sha256:8b1974f556d12cef360fa4165ff5d06581fccb89d26bf000c10efc9e0ebd45af
ubi9/openjdk-21-runtime@sha256:0996672156020a0b56b76ad798cfded425213057b7da14bdc38db47434577da3
ubi9/openjdk-25@sha256:a2d8613c2ff1dd8184df97be5b96e62d26f8ee778ba85fa855c7a6e0053a2470
ubi9/openjdk-25-runtime@sha256:b9097859f952d89452b3db7408876fc89d9d68228440775802d40aea170754c5

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility